Vulnerable golang Web application for education

This application has some vulnerabilities So, Use for educational or research purposes only

• docker-compose
  • golang
    • Vulnerability Application
    • CSRF-Trap Application
  • MySQL

1. cd Vulnerability-goapp
2. docker-compose up

1. Access 'https://localhost:9090/login' on browser ( Google Chrome recommended )

1. Access 'https://localhost:3030/scrftrap' on browser ( Google Chrome recommended )

Note: If you run this app on SaaS (like EC2), CSRF-TRAP-Application view pages(HTML) need to change redirect form destination suit for running-environmant

./Trap

Note. CSRF will be expressed when you access this page, so please be careful when access this page

MailAddress: [email protected]
Password : Amuro,Ikima-su!

MailAddress: [email protected]
Password : AkaiSuisei

1. login some user and go top page
2. go 'https://localhost:9090/adminlogin'

AdminMailAddress: [email protected]
Password : Qwerty1234

Payloads