A deliberately hackable social network app
- Docker
- docker-compose
The best way to run FaceBroke is within Docker. Before continuing, make sure that you have Docker installed and can run it from the command line. If you're running Linux, you'll also need to manually install docker-compose
-
Clone this repo with:
git clone https://github.com/softwaresecured/FaceBroke.git -
Go to the cloned directory:
cd FaceBroke/ -
run:
docker-compose up --build -d
This will launch the FaceBroke project. You can view the web interface at http://127.0.0.1:8081 and the Postgresql server is exposed on port 5432 to the host environment.
- While still in the project directory, run:
docker-compose up --build -d
- While still in the project directory, run:
docker-compose down
Two branches of code exist here:
- master --> for the working app.
- vulnerable --> where intentional vulnerabilities have been introduced and tagged
In order to accurately track these 'bugs', we need a naming convention. Current idea is:
{filename}-{previous commit hash}-{starting line of bug}