Nahamsec's Intro To Bug Bounty Labs

Intro

These are the labs that are used in Nahamsec's udemy course "Intro To Bug Bounty"

Requirements

You must have docker installed, this can simply be installed using apt install docker.io for debian based operating systems or see https://docs.docker.com/get-docker/ for other distros and operating systems

Installation Instructions

docker build -t nahamsec .

docker run -p 80:80 nahamsec

Add the following entries to your /etc/hosts file

127.0.0.1 naham.sec
127.0.0.1 www.naham.sec
127.0.0.1 xss.naham.sec
127.0.0.1 xss1.naham.sec
127.0.0.1 xss2.naham.sec
127.0.0.1 xss3.naham.sec
127.0.0.1 xss4.naham.sec
127.0.0.1 or1.naham.sec
127.0.0.1 or2.naham.sec
127.0.0.1 csrf.naham.sec
127.0.0.1 idor.naham.sec
127.0.0.1 lfi.naham.sec
127.0.0.1 sqli.naham.sec
127.0.0.1 sqli2.naham.sec
127.0.0.1 ssrf.naham.sec
127.0.0.1 ssrf2.naham.sec
127.0.0.1 ssrf3.naham.sec
127.0.0.1 ssrf4.naham.sec
127.0.0.1 ssrf5.naham.sec
127.0.0.1 ssrf6.naham.sec
127.0.0.1 ssrf7.naham.sec
127.0.0.1 xxe.naham.sec
127.0.0.1 xxe2.naham.sec
127.0.0.1 upload.naham.sec
127.0.0.1 upload2.naham.sec
127.0.0.1 rce.naham.sec
127.0.0.1 rce2.naham.sec
127.0.0.1 rce3.naham.sec

Now you can visit http://www.naham.sec in your browser to view the list of challenges

To Disable The Webserver

service docker stop

Credits

Udemy course created by Ben Sadeghipour and labs created by Adam Langley