First version of demo website

Corb3nik · Corb3nik · commit 6ed31d3fde93 · 2016-04-26T10:22:20.000-04:00
diff --git a/demo/index.php b/demo/index.php
@@ -0,0 +1,45 @@
+<!DOCTYPE HTML>
+<html>
+  <head>
+    <title>Vulnerable Website</title>
+  <head>
+
+<?php
+
+  $uploaddir = 'uploads/';
+  if (isset($_FILES['file'])) {
+    $file = $_FILES['file'];
+    $filename = $file['name'];
+
+    $dest = $uploaddir . $_POST['path'] . $filename;
+    $contents = file_get_contents($file['tmp_name']);
+    if (file_put_contents($dest, $contents))
+      echo "Upload successful, view your file here : <a href='/uploads/" . $filename . "'>$filename.</a>";
+    else
+      echo "<h3 style='color:red'>Permission Denied : You can't write in this folder.</h3>";
+  }
+
+?>
+
+  <body>
+    <h1>Upload a file</h1>
+    <p>Upload a file at the path of your choice</p>
+
+    <form method="POST" enctype='multipart/form-data' action='.'>
+      <label>Path : </label>
+      <input type="text" name="path" placeholder="scenario_1/uploads/" style='width:800px'/>
+
+      <br/>
+
+      <input type="hidden" name="MAX_FILE_SIZE" value="2000000" />
+      <label>File : </label>
+      <input type="file" name="file"/>
+
+      <br/>
+      <input type="submit" value="Upload">
+    </form>
+
+    <a href="/scenario_1/override_me.php">override_me</a>
+  </body>
+</html>
+
diff --git a/demo/info.php b/demo/info.php
@@ -0,0 +1,3 @@
+<?php
+  phpinfo();
+?>
diff --git a/demo/opcache/.gitignore b/demo/opcache/.gitignore
@@ -0,0 +1,5 @@
+# Ignore everything in this directory
+*
+# Except this file
+!.gitignore
+
diff --git a/demo/override_me.php b/demo/override_me.php
@@ -0,0 +1,3 @@
+<?php
+  echo "Try to override me";
+?>
diff --git a/demo/php.ini b/demo/php.ini
diff --git a/demo/uploads/.gitignore b/demo/uploads/.gitignore

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+<?php`
	`2`	`+ echo "Try to override me";`
	`3`	`+?>`