Skip to content
/ goof Public template
forked from snyk-labs/nodejs-goof

Super vulnerable todo list application

License

Notifications You must be signed in to change notification settings

snyk-partners/goof

 
 

Repository files navigation

Goof - Snyk's vulnerable demo app repo

Known Vulnerabilities

Welcome to the Snyk "Goof" vulnerable demo application repo. This repository contains a pair of purposefully vulnerable applications used for the purpose of demonstrating Snyk's capabilities in finding and fixing vulnerabilities in your dependencies and container images. This repo is used as part of several Snyk Snyk workshops including:


WARNING! | ACHTUNG! | ¡PRECAUCIÓN! | !AVERTISSEMENT!

Many of the applications that are part of this workshop are highly dangerous and are purposely built with vulnerabilities! Please, do not deploy these examples to clusters that you don't want to have attacked!

In other words, only deploy these to local/sandboxed clusters for the sole purpose of experimentation. Examples of places you should NOT deploy this to:

  • your developer servers
  • your QA environment
  • your company's cloud account

We take no responsibility for exploitation or damages caused by deploying anything from this repository (or the associated container images) to your personal or organization's infrastructure (private or public).

You have been warned!


Contents

Applications included in this repo:

  • thumbnailer - Python application deployed in a container who's base image contains a vulnerable version of ImageMagick.
  • todolist - Java JEE application with many vulnerable dependencies, including the Log4Shell vulnerability and an implementation of a malicous LDAP server for exploting it.

Note: This README is a WIP, and will be updated with more information soon.

About

Super vulnerable todo list application

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages

  • Java 57.7%
  • HTML 28.9%
  • Python 4.3%
  • Shell 3.7%
  • CSS 3.6%
  • Lua 1.1%
  • Other 0.7%