From 7fe66ceeb63d149765e2eed5e6e5120f517e4548 Mon Sep 17 00:00:00 2001 From: JorgeCarvalhoPT <166119788+JorgeCarvalhoPT@users.noreply.github.com> Date: Mon, 13 Jan 2025 11:35:15 +0100 Subject: [PATCH 1/2] Create 4.6 Lab How to setup LFI lab --- _pages/4 - White Listing/4.6 Lab | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 _pages/4 - White Listing/4.6 Lab diff --git a/_pages/4 - White Listing/4.6 Lab b/_pages/4 - White Listing/4.6 Lab new file mode 100644 index 0000000000..ddaea0b741 --- /dev/null +++ b/_pages/4 - White Listing/4.6 Lab @@ -0,0 +1,28 @@ +--- +title: 4.6 Lab +author: Jorge Carvalho +date: 13-01-2025 +category: Jekyll +layout: post +--- + +##### Setting Up the Docker Image for OWASP-SKF Lab +To set up the OWASP-SKF Lab using Docker, follow these steps: + +Pull the Docker Image +Download the OWASP-SKF Lab image from the Docker repository by running the following command: +```bash +sudo docker pull blabla1337/owasp-skf-lab:lfi +``` + +Run the Docker Container +Start the container and bind it to your local machine on port 5000 using the command below: + +```bash +sudo docker run -ti -p 127.0.0.1:5000:5000 blabla1337/owasp-skf-lab:lfi +``` + +Access the Application +Open your web browser and navigate to http://127.0.0.1:5000 to access the OWASP-SKF Lab. + +You're all set to begin exploring and testing with the OWASP-SKF Lab! From 845952260a3a3fb778f584f05c46935080366969 Mon Sep 17 00:00:00 2001 From: JorgeCarvalhoPT <166119788+JorgeCarvalhoPT@users.noreply.github.com> Date: Wed, 7 May 2025 11:13:00 +0200 Subject: [PATCH 2/2] Update 4.6 Lab lfi update with the writeup and secureby.design platform deploy --- _pages/4 - White Listing/4.6 Lab | 23 +++++++---------------- 1 file changed, 7 insertions(+), 16 deletions(-) diff --git a/_pages/4 - White Listing/4.6 Lab b/_pages/4 - White Listing/4.6 Lab index ddaea0b741..9f76e1ce8a 100644 --- a/_pages/4 - White Listing/4.6 Lab +++ b/_pages/4 - White Listing/4.6 Lab @@ -1,28 +1,19 @@ --- -title: 4.6 Lab +title: 4.6 LFI Lab author: Jorge Carvalho date: 13-01-2025 category: Jekyll layout: post --- -##### Setting Up the Docker Image for OWASP-SKF Lab -To set up the OWASP-SKF Lab using Docker, follow these steps: +##### Setting Up the Lab for LFI 1 -Pull the Docker Image -Download the OWASP-SKF Lab image from the Docker repository by running the following command: -```bash -sudo docker pull blabla1337/owasp-skf-lab:lfi -``` +You can follow the full write-up that includes detailed setup instructions for the LFI 1 lab at the following link: -Run the Docker Container -Start the container and bind it to your local machine on port 5000 using the command below: +[LFI 1 Write-up on GitBook](https://skf.gitbook.io/asvs-write-ups/local-file-inclusion-1-lfi-1/lfi-1) -```bash -sudo docker run -ti -p 127.0.0.1:5000:5000 blabla1337/owasp-skf-lab:lfi -``` +Alternatively, you can directly start the lab from the [SecureBy.Design platform](https://secureby.design) by deploying the lab environment, as shown in the image below: -Access the Application -Open your web browser and navigate to http://127.0.0.1:5000 to access the OWASP-SKF Lab. +![LFI Lab Deploy Button](/assets/gitbook/images/lfi-lab-deploy.jpeg) -You're all set to begin exploring and testing with the OWASP-SKF Lab! +You're all set to dive into the Local File Inclusion lab!