simple-exploitable-text-board

Used in the Report "Advanced cross-site scripting (XSS) attacks and protection".

Emulates a Twitter-like service with some unsanitized inputs

Setup and Start

Build images

docker compose build

Start service

docker compose up

Stop service

docker compose down

Exposes

Port	Service
80/tcp	HTTP
45000/tcp	MariaDB
45001/tcp	PHPMyAdmin

Default Logins

Service	Username	Password
App Admin User	admin	admin
DB root	root	lbspasswordroot
DB service	serviceuser	lbspassword

Admin

• Can change Message of the day (MotD)
• Remove Posts

Authors

Samuel Bach

Albin Karlsson (albinkarlsson.se)