insecure-bank/README.md

14 lines
543 B
Markdown

# Setup
- Use a typical Webserver + PHP + SQL setup
- Initialize the database with the instructions from `db-init.sql`
- Copy the `webroot` directory onto the webserver
- Inside `webroot`, copy `config.sample.php` to `config.php` and enter the SQL credentials
- Register on the webpage to get your own account
- Make yourself an admin:
Using an SQL management software, set the `admin` field to `1` in the entry of the table `user` that corresponds to your account.
# Target instance to attack
https://insecure-bank.infinityfreeapp.com