{"id":20160,"date":"2025-08-10T16:30:48","date_gmt":"2025-08-10T13:00:48","guid":{"rendered":"https:\/\/liangroup.net\/blog\/?p=20160"},"modified":"2025-08-10T09:14:01","modified_gmt":"2025-08-10T05:44:01","slug":"web-application-pentest-lab-setup-using-docker","status":"publish","type":"post","link":"https:\/\/liangroup.net\/blog\/web-application-pentest-lab-setup-using-docker\/","title":{"rendered":"\u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0622\u0632\u0645\u0627\u06cc\u0634\u06af\u0627\u0647 Web Application Pentest \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Docker"},"content":{"rendered":"<p><span style=\"font-size: 10pt\">\u062f\u0631 \u062d\u0648\u0632\u0647 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc\u060c Penetration Testing \u0648 Vulnerability Assessment \u0627\u0632 \u06af\u0627\u0645\u200c\u0647\u0627\u06cc \u06a9\u0644\u06cc\u062f\u06cc \u0628\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0648 \u06a9\u0627\u0647\u0634 \u062a\u0647\u062f\u06cc\u062f\u0627\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0627\u0644\u0642\u0648\u0647 \u0645\u062d\u0633\u0648\u0628 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f. \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0627\u0641\u0632\u0627\u06cc\u0634 \u0686\u0634\u0645\u06af\u06cc\u0631 \u062a\u0639\u062f\u0627\u062f \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u062a\u062d\u062a \u0648\u0628\u060c \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0645\u062d\u06cc\u0637\u200c\u0647\u0627\u06cc \u0622\u0632\u0645\u0627\u06cc\u0634\u06cc \u0627\u0645\u0646 \u0648 \u067e\u0627\u06cc\u062f\u0627\u0631 \u0628\u06cc\u0634 \u0627\u0632 \u0647\u0631 \u0632\u0645\u0627\u0646 \u062f\u06cc\u06af\u0631\u06cc \u0627\u0647\u0645\u06cc\u062a \u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u062f\u0631 \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647\u060c \u0628\u0647 \u0628\u0631\u0631\u0633\u06cc \u0645\u0641\u0647\u0648\u0645 Vulnerable Web Applications\u060c \u0627\u0647\u0645\u06cc\u062a \u0622\u0646\u200c\u0647\u0627 \u062f\u0631 \u0641\u0631\u0622\u06cc\u0646\u062f Penetration Testing\u060c \u0648 \u0646\u062d\u0648\u0647 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0627\u06cc\u0646 \u0645\u062d\u06cc\u0637\u200c\u0647\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Docker \u062e\u0648\u0627\u0647\u06cc\u0645 \u067e\u0631\u062f\u0627\u062e\u062a.<\/span><\/p>\n<p><span style=\"font-size: 10pt\"><strong>\u0641\u0647\u0631\u0633\u062a \u0645\u0637\u0627\u0644\u0628<\/strong><\/span><\/p>\n<ol>\n<li><span style=\"font-size: 10pt\">\u0645\u0642\u062f\u0645\u0647\u200c\u0627\u06cc \u0628\u0631 Vulnerable Web Applications<\/span><\/li>\n<li><span style=\"font-size: 10pt\">\u067e\u06cc\u0634\u200c\u0646\u06cc\u0627\u0632\u0647\u0627<\/span><\/li>\n<li><span style=\"font-size: 10pt\">\u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc Docker \u0628\u0631 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645<\/span><\/li>\n<li><span style=\"font-size: 10pt\">\u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc Vulnerable Web Applications \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Docker<\/span><\/li>\n<li><span style=\"font-size: 10pt\">Damn Vulnerable Web Application (DVWA)<\/span><\/li>\n<li><span style=\"font-size: 10pt\">OWASP Juice Shop<\/span><\/li>\n<li><span style=\"font-size: 10pt\">OWASP VulnerableApp<\/span><\/li>\n<li><span style=\"font-size: 10pt\">OWASP WebGoat<\/span><\/li>\n<li><span style=\"font-size: 10pt\">SQLi-Labs<\/span><\/li>\n<li><span style=\"font-size: 10pt\">bWAPP<\/span><\/li>\n<li><span style=\"font-size: 10pt\">OWASP Mutillidae II<\/span><\/li>\n<li><span style=\"font-size: 10pt\">Damn Vulnerable GraphQL Application<\/span><\/li>\n<li><span style=\"font-size: 10pt\">Damn Vulnerable RESTurant API<\/span><\/li>\n<li><span style=\"font-size: 10pt\">Pixi<\/span><\/li>\n<li><span style=\"font-size: 10pt\">PyGoat<\/span><\/li>\n<li><span style=\"font-size: 10pt\">Server-Side Request Forgery<\/span><\/li>\n<li><span style=\"font-size: 10pt\">VulnBank<\/span><\/li>\n<li><span style=\"font-size: 10pt\">VulnLab<\/span><\/li>\n<li><span style=\"font-size: 10pt\">OWASP WrongSecrets<\/span><\/li>\n<li><span style=\"font-size: 10pt\">Yrprey<\/span><\/li>\n<li><span style=\"font-size: 10pt\">Zero Health<\/span><\/li>\n<li><span style=\"font-size: 10pt\">\u0646\u062a\u06cc\u062c\u0647\u200c\u06af\u06cc\u0631\u06cc<\/span><\/li>\n<\/ol>\n<p><span style=\"font-size: 10pt\"><strong>\u0645\u0642\u062f\u0645\u0647\u200c\u0627\u06cc \u0628\u0631<\/strong><strong> Vulnerable Web Applications<\/strong><\/span><\/p>\n<p><span style=\"font-size: 10pt\">Vulnerable Web Applications \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u062a\u062d\u062a \u0648\u0628\u06cc \u0647\u0633\u062a\u0646\u062f \u06a9\u0647 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0639\u0645\u062f\u06cc \u0628\u0627 \u0636\u0639\u0641\u200c\u0647\u0627 \u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0637\u0631\u0627\u062d\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f \u062a\u0627 Penetration Testers \u0648 \u067e\u0698\u0648\u0647\u0634\u06af\u0631\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a \u0628\u062a\u0648\u0627\u0646\u0646\u062f \u0645\u0647\u0627\u0631\u062a\u200c\u0647\u0627\u06cc \u062e\u0648\u062f \u0631\u0627 \u062f\u0631 \u06cc\u06a9 \u0645\u062d\u06cc\u0637 \u0627\u06cc\u0645\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644\u200c\u0634\u062f\u0647 \u0622\u0632\u0645\u0627\u06cc\u0634 \u0648 \u062a\u0642\u0648\u06cc\u062a \u06a9\u0646\u0646\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0627\u06cc\u0646 \u062f\u0633\u062a\u0647 \u0627\u0632 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627 \u0646\u0642\u0634 \u0645\u0647\u0645\u06cc \u062f\u0631 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0648 \u06a9\u0627\u0647\u0634 \u062a\u0647\u062f\u06cc\u062f\u0627\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0627\u0644\u0642\u0648\u0647 \u0627\u06cc\u0641\u0627 \u06a9\u0631\u062f\u0647 \u0648 \u0628\u0647\u200c\u0637\u0648\u0631 \u06af\u0633\u062a\u0631\u062f\u0647 \u062f\u0631 \u0635\u0646\u0639\u062a \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u0646\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\"><strong>\u067e\u06cc\u0634\u200c\u0646\u06cc\u0627\u0632\u0647\u0627<\/strong><\/span><\/p>\n<ul>\n<li><span style=\"font-size: 10pt\">\u0622\u0634\u0646\u0627\u06cc\u06cc \u067e\u0627\u06cc\u0647 \u0628\u0627 Docker \u0648 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0622\u0646<\/span><\/li>\n<li><span style=\"font-size: 10pt\">\u0622\u0634\u0646\u0627\u06cc\u06cc \u0628\u0627 Linux \u0648 \u0645\u0641\u0627\u0647\u06cc\u0645 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u062a\u062d\u062a \u0648\u0628<\/span><\/li>\n<\/ul>\n<p><span style=\"font-size: 10pt\"><strong>\u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc<\/strong><strong> Docker <\/strong><strong>\u0628\u0631 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645<\/strong><\/span><\/p>\n<p><span style=\"font-size: 10pt\">Docker \u06cc\u06a9 \u067e\u0644\u062a\u0641\u0631\u0645 \u0627\u0633\u062a \u06a9\u0647 \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627 \u0631\u0627 \u062f\u0631\u0648\u0646 Container\u200c\u0647\u0627\u06cc \u0633\u0628\u06a9 \u0648 \u0627\u06cc\u0632\u0648\u0644\u0647 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f \u2014 \u0631\u0648\u06cc\u06a9\u0631\u062f\u06cc \u0627\u06cc\u062f\u0647\u200c\u0622\u0644 \u0628\u0631\u0627\u06cc \u0627\u0633\u062a\u0642\u0631\u0627\u0631 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0628\u062f\u0648\u0646 \u0627\u06cc\u062c\u0627\u062f \u062a\u063a\u06cc\u06cc\u0631 \u06cc\u0627 \u062a\u0627\u062b\u06cc\u0631 \u0628\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0627\u0635\u0644\u06cc.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc \u0646\u0635\u0628 Docker \u0648 Docker Compose \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 Debian\/Ubuntu\u060c \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0632\u06cc\u0631 \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u06cc\u062f:<\/span><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\">apt install docker.io<\/pre>\n<p><img fetchpriority=\"high\" decoding=\"async\" class=\"alignnone wp-image-20174\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/1-1-300x155.png\" alt=\"\" width=\"472\" height=\"244\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/1-1-300x155.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/1-1-768x396.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/1-1-150x77.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/1-1.png 1016w\" sizes=\"(max-width: 472px) 100vw, 472px\" \/><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\">apt install docker-compose<\/pre>\n<p><img decoding=\"async\" class=\"alignnone wp-image-20175\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/2-4-300x128.png\" alt=\"\" width=\"476\" height=\"203\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/2-4-300x128.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/2-4-150x64.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/2-4.png 717w\" sizes=\"(max-width: 476px) 100vw, 476px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>\u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc<\/strong><strong> Vulnerable Web Applications <\/strong><strong>\u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632<\/strong><strong> Docker<\/strong><\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u062f\u0631 \u0627\u062f\u0627\u0645\u0647\u060c \u062f\u0633\u062a\u0648\u0631\u0627\u0644\u0639\u0645\u0644\u200c\u0647\u0627\u06cc \u0644\u0627\u0632\u0645 \u0628\u0631\u0627\u06cc \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0627\u0646\u0648\u0627\u0639 Vulnerable Web Applications \u0628\u0627 \u0628\u0647\u0631\u0647\u200c\u06af\u06cc\u0631\u06cc \u0627\u0632 Docker \u0627\u0631\u0627\u0626\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a:<\/span><\/p>\n<p><span style=\"font-size: 10pt\"><strong>DVWA (Damn Vulnerable Web Application)<\/strong><\/span><\/p>\n<p><span style=\"font-size: 10pt\">DVWA \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u062a\u062d\u062a \u0648\u0628 \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 PHP\/MySQL \u0627\u0633\u062a \u06a9\u0647 \u06cc\u06a9 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0631\u0627 \u0634\u0628\u06cc\u0647\u200c\u0633\u0627\u0632\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u062f\u0631 \u06cc\u06a9 \u0645\u062d\u06cc\u0637 \u0627\u0645\u0646\u060c \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0631\u0627\u06cc\u062c \u0648\u0628 \u0646\u0638\u06cc\u0631 SQL Injection \u0648 Cross-Site Scripting (XSS) \u0631\u0627 \u062a\u0645\u0631\u06cc\u0646 \u06a9\u0646\u0646\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc DVWA \u062f\u0631 Docker\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f:<\/span><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\">docker pull sagikazarmark\/dvwa<\/pre>\n<p><img decoding=\"async\" class=\"alignnone wp-image-20176\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/3-2-300x126.png\" alt=\"\" width=\"526\" height=\"221\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/3-2-300x126.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/3-2-150x63.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/3-2.png 720w\" sizes=\"(max-width: 526px) 100vw, 526px\" \/><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\">docker run --rm -it -p 8080:80 sagikazarmark\/dvwa<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-20177\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/4-300x112.png\" alt=\"\" width=\"533\" height=\"199\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/4-300x112.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/4-768x287.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/4-150x56.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/4.png 914w\" sizes=\"(max-width: 533px) 100vw, 533px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>\u0645\u0631\u0627\u062d\u0644 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0648 \u0648\u0631\u0648\u062f \u0628\u0647<\/strong><strong> DVWA<\/strong><\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0635\u0641\u062d\u0647 \u0648\u0631\u0648\u062f<\/span><\/p>\n<ul>\n<li><span style=\"font-size: 10pt\">\u0645\u0631\u0648\u0631\u06af\u0631 \u062e\u0648\u062f \u0631\u0627 \u0628\u0627\u0632 \u06a9\u0631\u062f\u0647 \u0648 \u0622\u062f\u0631\u0633 \u0632\u06cc\u0631 \u0631\u0627 \u0648\u0627\u0631\u062f \u06a9\u0646\u06cc\u062f:<\/span><br \/>\n<span style=\"font-size: 10pt\">http:\/\/localhost:8080\/login.php<\/span><\/li>\n<li><span style=\"font-size: 10pt\">\u0627\u0637\u0644\u0627\u0639\u0627\u062a \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u0648\u0631\u0648\u062f:<\/span>\n<ul>\n<li><span style=\"font-size: 10pt\">\u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc admin<\/span><\/li>\n<li><span style=\"font-size: 10pt\">\u0631\u0645\u0632 \u0639\u0628\u0648\u0631 password<\/span><\/li>\n<\/ul>\n<\/li>\n<li><span style=\"font-size: 10pt\">\u0628\u0631 \u0631\u0648\u06cc \u062f\u06a9\u0645\u0647 Login \u06a9\u0644\u06cc\u06a9 \u06a9\u0646\u06cc\u062f.<\/span><\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-20178\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/5-300x188.png\" alt=\"\" width=\"521\" height=\"326\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/5-300x188.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/5-1024x640.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/5-768x480.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/5-150x94.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/5.png 1041w\" sizes=\"(max-width: 521px) 100vw, 521px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>\u0627\u06cc\u062c\u0627\u062f\/\u0628\u0627\u0632\u0646\u0634\u0627\u0646\u06cc \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647<\/strong><\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 \u0648\u0631\u0648\u062f \u0645\u0648\u0641\u0642\u06cc\u062a\u200c\u0622\u0645\u06cc\u0632\u060c \u0635\u0641\u062d\u0647\u200c\u0627\u06cc \u0628\u0627 \u0639\u0646\u0648\u0627\u0646 Database configuration \u0646\u0645\u0627\u06cc\u0634 \u062f\u0627\u062f\u0647 \u062e\u0648\u0627\u0647\u062f \u0634\u062f.<\/span><br \/>\n<span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc \u0627\u0646\u062c\u0627\u0645 \u0639\u0645\u0644\u06cc\u0627\u062a \u0632\u06cc\u0631\u060c \u062f\u06a9\u0645\u0647 Create \/ Reset Database \u0631\u0627 \u06a9\u0644\u06cc\u06a9 \u06a9\u0646\u06cc\u062f:<\/span><\/p>\n<ul>\n<li><span style=\"font-size: 10pt\">\u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0627\u0648\u0644\u06cc\u0647 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647 DVWA (\u062f\u0631 \u0635\u0648\u0631\u062a \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0627\u0648\u0644\u06cc\u0647)<\/span><\/li>\n<li><span style=\"font-size: 10pt\">\u067e\u0627\u06a9\u200c\u0633\u0627\u0632\u06cc \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0645\u0648\u062c\u0648\u062f \u0648 \u0628\u0627\u0632\u0646\u0634\u0627\u0646\u06cc \u0628\u0647 \u062d\u0627\u0644\u062a \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 (\u062f\u0631 \u0635\u0648\u0631\u062a \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0628\u0627\u0632\u0646\u0634\u0627\u0646\u06cc)<\/span><\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-20179\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/6-280x300.png\" alt=\"\" width=\"531\" height=\"569\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/6-280x300.png 280w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/6-955x1024.png 955w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/6-768x823.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/6-150x161.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/6.png 973w\" sizes=\"(max-width: 531px) 100vw, 531px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u0646\u06a9\u062a\u0647: \u0645\u0637\u0645\u0626\u0646 \u0634\u0648\u06cc\u062f \u06a9\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u06cc MySQL \u062f\u0631 \u0641\u0627\u06cc\u0644 \/var\/www\/html\/config\/config.inc.php \u0628\u0647 \u062f\u0631\u0633\u062a\u06cc \u062a\u0646\u0638\u06cc\u0645 \u0634\u062f\u0647 \u0628\u0627\u0634\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\"><strong>\u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u062e\u0648\u062f\u06a9\u0627\u0631 \u0635\u0641\u062d\u0647 \u0627\u0635\u0644\u06cc<\/strong><\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647\u060c \u0628\u0647\u200c\u0637\u0648\u0631 \u062e\u0648\u062f\u06a9\u0627\u0631 \u0628\u0647 \u0635\u0641\u062d\u0647 \u062e\u0648\u0634\u200c\u0622\u0645\u062f\u06af\u0648\u06cc\u06cc DVWA \u0647\u062f\u0627\u06cc\u062a \u062e\u0648\u0627\u0647\u06cc\u062f \u0634\u062f.<\/span><br \/>\n<span style=\"font-size: 10pt\">\u062f\u0631 \u0627\u06cc\u0646 \u0635\u0641\u062d\u0647 \u0642\u0627\u062f\u0631 \u062e\u0648\u0627\u0647\u06cc\u062f \u0628\u0648\u062f:<\/span><\/p>\n<ul>\n<li><span style=\"font-size: 10pt\">\u0633\u0637\u062d \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0627 \u0627\u0646\u062a\u062e\u0627\u0628 \u06a9\u0646\u06cc\u062f (Low\/Medium\/High\/Impossible)<\/span><\/li>\n<li><span style=\"font-size: 10pt\">\u0628\u0647 \u0645\u0627\u0698\u0648\u0644\u200c\u0647\u0627\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0645\u0627\u0646\u0646\u062f SQL Injection \u0648 XSS \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u062f.<\/span><\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-20180\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/7-300x298.png\" alt=\"\" width=\"562\" height=\"558\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/7-300x298.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/7-150x149.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/7-768x763.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/7-96x96.png 96w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/7.png 997w\" sizes=\"(max-width: 562px) 100vw, 562px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>Juice Shop<\/strong><\/span><\/p>\n<p><span style=\"font-size: 10pt\">OWASP Juice Shop \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u0648\u0628 \u0645\u062a\u0646\u200c\u0628\u0627\u0632 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0639\u0645\u062f\u06cc \u0646\u0627\u0627\u0645\u0646 \u0637\u0631\u0627\u062d\u06cc \u0634\u062f\u0647 \u0648 \u0628\u06cc\u0634 \u0627\u0632 \u06f3\u06f0 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0648 \u0686\u0627\u0644\u0634 \u0645\u062e\u062a\u0644\u0641 \u0631\u0627 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f \u062a\u0627 \u0622\u0646\u200c\u0647\u0627 \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0648 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u06a9\u0646\u0646\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc Juice Shop \u062f\u0631 Docker\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u0645\u0627\u06cc\u06cc\u062f:<\/span><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\">docker pull bkimminich\/juice-shop<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-20181\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/8-300x229.png\" alt=\"\" width=\"548\" height=\"418\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/8-300x229.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/8-150x115.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/8.png 752w\" sizes=\"(max-width: 548px) 100vw, 548px\" \/><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\">docker run --rm -p 3000:3000 bkimminich\/juice-shop<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-20182\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/9-300x139.png\" alt=\"\" width=\"553\" height=\"256\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/9-300x139.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/9-768x357.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/9-150x70.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/9.png 783w\" sizes=\"(max-width: 553px) 100vw, 553px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u06a9\u0627\u0646\u062a\u06cc\u0646\u0631 Juice Shop\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0645\u0631\u0648\u0631\u06af\u0631 \u062e\u0648\u062f \u0628\u0647 \u0622\u062f\u0631\u0633 http:\/\/localhost:3000 \u0645\u0631\u0627\u062c\u0639\u0647 \u06a9\u0646\u06cc\u062f. \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0642\u0637\u0647\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0641\u0639\u0627\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u0639\u0645\u0644\u06cc \u062a\u0633\u062a \u0646\u0641\u0648\u0630 \u062e\u0648\u062f \u0631\u0627 \u0622\u063a\u0627\u0632 \u0646\u0645\u0627\u06cc\u06cc\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-20183\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/10-300x298.png\" alt=\"\" width=\"581\" height=\"577\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/10-300x298.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/10-1024x1018.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/10-150x149.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/10-768x763.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/10-96x96.png 96w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/10.png 1121w\" sizes=\"(max-width: 581px) 100vw, 581px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>OWASP VulnApp<\/strong><\/span><\/p>\n<p><span style=\"font-size: 10pt\">OWASP VulnApp \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u062a\u062d\u062a \u0648\u0628 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0639\u0645\u062f\u06cc \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u0627\u0646\u0648\u0627\u0639 \u0645\u062e\u062a\u0644\u0641 \u062d\u0645\u0644\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0637\u0631\u0627\u062d\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u0645\u062d\u06cc\u0637\u06cc \u0627\u0645\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644\u200c\u0634\u062f\u0647 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f \u062a\u0627 \u062f\u0631\u0628\u0627\u0631\u0647 \u0627\u0645\u0646\u06cc\u062a \u0648\u0628 \u0622\u0645\u0648\u0632\u0634 \u0628\u0628\u06cc\u0646\u0646\u062f \u0648 \u0645\u0647\u0627\u0631\u062a \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0631\u0627 \u062a\u0645\u0631\u06cc\u0646 \u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0628\u0631\u0646\u0627\u0645\u0647 \u0634\u0627\u0645\u0644 \u0645\u062c\u0645\u0648\u0639\u0647\u200c\u0627\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0645\u0627\u0646\u0646\u062f SQL Injection\u060c XSS \u0648 File Inclusion \u0645\u06cc\u200c\u0628\u0627\u0634\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc OWASP VulnApp \u062f\u0631 Docker\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u0645\u0627\u06cc\u06cc\u062f:<\/span><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\">git clone https:\/\/github.com\/SasanLabs\/VulnerableApp.git\r\ncd VulnerableApp\r\n<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-20184\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/11-298x300.png\" alt=\"\" width=\"528\" height=\"531\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/11-298x300.png 298w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/11-150x151.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/11-768x774.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/11-96x96.png 96w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/11.png 929w\" sizes=\"(max-width: 528px) 100vw, 528px\" \/><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\">docker-compose up<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-20185\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/12-300x199.png\" alt=\"\" width=\"534\" height=\"354\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/12-300x199.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/12-768x509.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/12-150x99.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/12.png 788w\" sizes=\"(max-width: 534px) 100vw, 534px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u06a9\u0627\u0646\u062a\u06cc\u0646\u0631 OWASP VulnApp\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0645\u0631\u0648\u0631\u06af\u0631 \u062e\u0648\u062f \u0628\u0647 \u0622\u062f\u0631\u0633 http:\/\/localhost:80 \u0645\u0631\u0627\u062c\u0639\u0647 \u06a9\u0646\u06cc\u062f. \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0642\u0637\u0647\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0641\u0639\u0627\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u0639\u0645\u0644\u06cc \u062a\u0633\u062a \u0646\u0641\u0648\u0630 \u062e\u0648\u062f \u0631\u0627 \u0622\u063a\u0627\u0632 \u0646\u0645\u0627\u06cc\u06cc\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-20186\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/13-300x249.png\" alt=\"\" width=\"533\" height=\"442\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/13-300x249.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/13-1024x849.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/13-768x637.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/13-150x124.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/13.png 1042w\" sizes=\"(max-width: 533px) 100vw, 533px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>WebGoat<\/strong><\/span><\/p>\n<p><span style=\"font-size: 10pt\">WebGoat \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u062a\u062d\u062a \u0648\u0628 \u0622\u0645\u0648\u0632\u0634\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0628\u0627 \u0627\u0631\u0627\u0626\u0647 \u0645\u062c\u0645\u0648\u0639\u0647\u200c\u0627\u06cc \u0627\u0632 \u062f\u0631\u0633\u200c\u0647\u0627 \u0648 \u062a\u0645\u0631\u06cc\u0646\u200c\u0647\u0627\u060c \u0645\u0641\u0627\u0647\u06cc\u0645 \u0627\u0645\u0646\u06cc\u062a \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u062a\u062d\u062a \u0648\u0628 \u0645\u0627\u0646\u0646\u062f \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a (Authentication)\u060c \u0645\u062c\u0648\u0632\u062f\u0647\u06cc (Authorization) \u0648 \u0627\u0639\u062a\u0628\u0627\u0631\u0633\u0646\u062c\u06cc \u0648\u0631\u0648\u062f\u06cc (Input Validation) \u0631\u0627 \u0622\u0645\u0648\u0632\u0634 \u0645\u06cc\u200c\u062f\u0647\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc WebGoat \u062f\u0631 Docker\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u0645\u0627\u06cc\u06cc\u062f:<\/span><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\">docker pull webgoat\/webgoat\r\ndocker run -p 127.0.0.1:8080:8080 -p 127.0.0.1:9090:9090 -e TZ=Europe\/Amsterdam webgoat\/webgoat\r\n<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-20187\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/14-300x189.png\" alt=\"\" width=\"563\" height=\"355\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/14-300x189.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/14-1024x646.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/14-768x485.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/14-150x95.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/14.png 1282w\" sizes=\"(max-width: 563px) 100vw, 563px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u06a9\u0627\u0646\u062a\u06cc\u0646\u0631 WebGoat\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0645\u0631\u0648\u0631\u06af\u0631 \u062e\u0648\u062f \u0628\u0647 \u0622\u062f\u0631\u0633 http:\/\/localhost:8080\/WebGoat\/login \u0645\u0631\u0627\u062c\u0639\u0647 \u06a9\u0646\u06cc\u062f. \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0642\u0637\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0641\u0639\u0627\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u0639\u0645\u0644\u06cc \u062a\u0633\u062a \u0646\u0641\u0648\u0630 \u062e\u0648\u062f \u0631\u0627 \u0622\u063a\u0627\u0632 \u0646\u0645\u0627\u06cc\u06cc\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-20188\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/15-300x194.png\" alt=\"\" width=\"585\" height=\"378\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/15-300x194.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/15-768x496.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/15-150x97.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/15.png 931w\" sizes=\"(max-width: 585px) 100vw, 585px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>SQLi-Labs (Dhakkan)<\/strong><\/span><\/p>\n<p><span style=\"font-size: 10pt\">SQLi-Labs \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u062a\u062d\u062a \u0648\u0628 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u062a\u062e\u0635\u0635\u06cc \u0628\u0631\u0627\u06cc \u0622\u0645\u0648\u0632\u0634 \u062d\u0645\u0644\u0627\u062a SQL Injection \u0637\u0631\u0627\u062d\u06cc \u0634\u062f\u0647 \u0648 \u0645\u062c\u0645\u0648\u0639\u0647\u200c\u0627\u06cc \u0627\u0632 \u0686\u0627\u0644\u0634\u200c\u0647\u0627 \u0648 \u062a\u0645\u0631\u06cc\u0646\u200c\u0647\u0627 \u0631\u0627 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f \u062a\u0627 \u0645\u0647\u0627\u0631\u062a \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc SQL Injection \u0631\u0627 \u062a\u0645\u0631\u06cc\u0646 \u0646\u0645\u0627\u06cc\u0646\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc SQLi-Labs \u062f\u0631 Docker\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f:<\/span><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\">docker pull acgpiano\/sqli-labs\r\ndocker run -d -p 80:80 acgpiano\/sqli-labs:latest\r\n<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-20189\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/16-300x237.png\" alt=\"\" width=\"565\" height=\"446\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/16-300x237.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/16-768x607.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/16-150x119.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/16.png 923w\" sizes=\"(max-width: 565px) 100vw, 565px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u06a9\u0627\u0646\u062a\u06cc\u0646\u0631 SQLi-Labs\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0645\u0631\u0648\u0631\u06af\u0631 \u062e\u0648\u062f \u0628\u0647 \u0622\u062f\u0631\u0633 http:\/\/localhost \u0645\u0631\u0627\u062c\u0639\u0647 \u06a9\u0646\u06cc\u062f. \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0642\u0637\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0641\u0639\u0627\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u0639\u0645\u0644\u06cc \u062a\u0633\u062a \u0646\u0641\u0648\u0630 \u062e\u0648\u062f \u0631\u0627 \u0622\u063a\u0627\u0632 \u0646\u0645\u0627\u06cc\u06cc\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc SQLi-LABS \u0648 \u0686\u0627\u0644\u0634\u200c\u0647\u0627<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc \u0627\u0646\u062c\u0627\u0645 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0648 \u0628\u0627\u0632\u0646\u0634\u0627\u0646\u06cc \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647\u060c \u06af\u0632\u06cc\u0646\u0647\u200c\u06cc \u201cconfiguration\/reset Database for labs\u201d \u0631\u0627 \u0627\u0646\u062a\u062e\u0627\u0628 \u06a9\u0646\u06cc\u062f \u062a\u0627:<\/span><\/p>\n<ul>\n<li><span style=\"font-size: 10pt\">\u062f\u0631 \u0635\u0648\u0631\u062a \u0648\u062c\u0648\u062f\u060c \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647 \u0642\u062f\u06cc\u0645\u06cc (\u0628\u0627 \u0647\u062f\u0641 \u0627\u0645\u0646\u06cc\u062a\u06cc) \u067e\u0627\u06a9\u200c\u0633\u0627\u0632\u06cc \u0634\u0648\u062f.<\/span><\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-20190\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/17-300x130.png\" alt=\"\" width=\"552\" height=\"239\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/17-300x130.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/17-768x333.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/17-150x65.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/17.png 971w\" sizes=\"(max-width: 552px) 100vw, 552px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u062e\u0631\u0648\u062c\u06cc \u062a\u0623\u06cc\u06cc\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0627\u06cc\u062c\u0627\u062f \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647\u200c\u0647\u0627 \u0648 \u062c\u062f\u0627\u0648\u0644 \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a \u0627\u0646\u062c\u0627\u0645 \u0634\u062f\u0647 \u0627\u0633\u062a (\u0628\u0631\u0627\u06cc \u0645\u062b\u0627\u0644: [*]\u2026\u2026Creating New Table \u2018USERS\u2019 successfully)<\/span><\/p>\n<p><span style=\"font-size: 10pt\"><strong>\u062f\u0633\u062a\u0647\u200c\u0628\u0646\u062f\u06cc \u0686\u0627\u0644\u0634\u200c\u0647\u0627<\/strong><\/span><\/p>\n<ul>\n<li><span style=\"font-size: 10pt\">\u0635\u0641\u062d\u0647 \u06f1 (Basic): \u0634\u0627\u0645\u0644 \u0627\u0646\u0648\u0627\u0639 \u062d\u0645\u0644\u0627\u062a SQL Injection \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u062e\u0637\u0627 (Error-based)\u060c \u06a9\u0648\u0631 (Blind) \u0648 \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u0632\u0645\u0627\u0646 (Time-based) (\u0645\u062b\u0644\u0627\u064b: GET \u2013 Error based \u2013 Single quotes).<\/span><\/li>\n<li><span style=\"font-size: 10pt\">\u0635\u0641\u062d\u0647 \u06f2 (Advanced): \u062d\u0645\u0644\u0627\u062a \u067e\u06cc\u0686\u06cc\u062f\u0647\u200c\u062a\u0631 \u0645\u0627\u0646\u0646\u062f \u062a\u0632\u0631\u06cc\u0642\u200c\u0647\u0627\u06cc \u062f\u0648\u06af\u0627\u0646\u0647 (Double injections) \u0648 \u0627\u0633\u062a\u062e\u0631\u0627\u062c \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u0627 outfile dumping.<\/span><\/li>\n<li><span style=\"font-size: 10pt\">\u0635\u0641\u062d\u0647 \u06f3 (Stacked): \u062a\u0632\u0631\u06cc\u0642\u200c\u0647\u0627\u06cc \u0686\u0646\u062f \u06a9\u0648\u0626\u0631\u06cc (Multi-query injections) (\u0645\u062b\u0644\u0627\u064b: ST \u2013 Double Injection).<\/span><\/li>\n<li><span style=\"font-size: 10pt\">\u0635\u0641\u062d\u0647 \u06f4 (Challenges): \u0645\u062c\u0645\u0648\u0639\u0647\u200c\u0627\u06cc \u0627\u0632 \u0686\u0627\u0644\u0634\u200c\u0647\u0627 \u0628\u0627 \u0633\u0637\u0648\u062d \u062f\u0634\u0648\u0627\u0631\u06cc \u0645\u062a\u0646\u0648\u0639 (\u0627\u0632 Less-1 \u062a\u0627 Less-22).<\/span><\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-20191\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/18-300x239.png\" alt=\"\" width=\"568\" height=\"453\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/18-300x239.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/18-1024x817.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/18-768x612.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/18-150x120.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/18.png 1481w\" sizes=\"(max-width: 568px) 100vw, 568px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>bWAPP<\/strong><\/span><\/p>\n<p><span style=\"font-size: 10pt\">bWAPP \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u062a\u062d\u062a \u0648\u0628 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0639\u0645\u062f\u06cc \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u0627\u0646\u0648\u0627\u0639 \u0645\u062e\u062a\u0644\u0641 \u062d\u0645\u0644\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0637\u0631\u0627\u062d\u06cc \u0634\u062f\u0647 \u0648 \u0645\u062d\u06cc\u0637\u06cc \u0627\u0645\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644\u200c\u0634\u062f\u0647 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0622\u0645\u0648\u0632\u0634 \u0627\u0645\u0646\u06cc\u062a \u0648\u0628 \u0648 \u062a\u0645\u0631\u06cc\u0646 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0627\u06cc\u0646 \u0628\u0631\u0646\u0627\u0645\u0647 \u0645\u062c\u0645\u0648\u0639\u0647\u200c\u0627\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0627\u0632 \u062c\u0645\u0644\u0647 SQL Injection\u060c XSS \u0648 File Inclusion \u0631\u0627 \u067e\u0648\u0634\u0634 \u0645\u06cc\u200c\u062f\u0647\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc bWAPP \u062f\u0631 Docker\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f:<\/span><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\">docker pull raesene\/bwapp\r\ndocker run -d -p 80:80 raesene\/bwapp\r\n<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-20192\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/19-300x97.png\" alt=\"\" width=\"538\" height=\"174\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/19-300x97.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/19-768x248.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/19-150x48.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/19.png 990w\" sizes=\"(max-width: 538px) 100vw, 538px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u06a9\u0627\u0646\u062a\u06cc\u0646\u0631 bWAPP\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0645\u0631\u0648\u0631\u06af\u0631 \u062e\u0648\u062f \u0628\u0647 \u0622\u062f\u0631\u0633 http:\/\/localhost\/install.php \u0645\u0631\u0627\u062c\u0639\u0647 \u06a9\u0646\u06cc\u062f.\u0628\u0631\u0627\u06cc \u0646\u0635\u0628 bWAPP\u060c \u0631\u0648\u06cc \u06af\u0632\u06cc\u0646\u0647 \u201chere\u201d \u06a9\u0644\u06cc\u06a9 \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-20193\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/20-300x192.png\" alt=\"\" width=\"541\" height=\"346\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/20-300x192.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/20-1024x656.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/20-768x492.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/20-150x96.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/20.png 1204w\" sizes=\"(max-width: 541px) 100vw, 541px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 \u062a\u06a9\u0645\u06cc\u0644 \u0641\u0631\u0622\u06cc\u0646\u062f \u0646\u0635\u0628\u060c \u0635\u0641\u062d\u0647 \u0627\u0635\u0644\u06cc bWAPP \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u062e\u0648\u062f\u06a9\u0627\u0631 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u062e\u0648\u0627\u0647\u062f \u0634\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-20194\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/21-300x232.png\" alt=\"\" width=\"546\" height=\"422\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/21-300x232.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/21-1024x790.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/21-768x593.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/21-390x300.png 390w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/21-150x116.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/21.png 1314w\" sizes=\"(max-width: 546px) 100vw, 546px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>Mutillidae<\/strong><\/span><\/p>\n<p><span style=\"font-size: 10pt\">Mutillidae \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u062a\u062d\u062a \u0648\u0628 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0639\u0645\u062f\u06cc \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u0627\u0646\u0648\u0627\u0639 \u0645\u062e\u062a\u0644\u0641 \u062d\u0645\u0644\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0637\u0631\u0627\u062d\u06cc \u0634\u062f\u0647 \u0648 \u0645\u062d\u06cc\u0637\u06cc \u0627\u0645\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644\u200c\u0634\u062f\u0647 \u0628\u0631\u0627\u06cc \u0622\u0645\u0648\u0632\u0634 \u0627\u0645\u0646\u06cc\u062a \u0648\u0628 \u0648 \u062a\u0645\u0631\u06cc\u0646 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0627\u06cc\u0646 \u0628\u0631\u0646\u0627\u0645\u0647 \u0645\u062c\u0645\u0648\u0639\u0647\u200c\u0627\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0627\u0632 \u062c\u0645\u0644\u0647 SQL Injection\u060c XSS \u0648 File Inclusion \u0631\u0627 \u067e\u0648\u0634\u0634 \u062f\u0627\u062f\u0647 \u0648 \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0633\u0646\u0627\u0631\u06cc\u0648\u0647\u0627\u06cc \u0648\u0627\u0642\u0639\u200c\u06af\u0631\u0627\u06cc\u0627\u0646\u0647 \u0648 \u0686\u0627\u0644\u0634\u200c\u0628\u0631\u0627\u0646\u06af\u06cc\u0632 \u062e\u0648\u062f \u0634\u0646\u0627\u062e\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc Mutillidae \u062f\u0631 Docker\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f:<\/span><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\">git clone https:\/\/github.com\/webpwnized\/mutillidae-docker.git\r\ncd mutillidae-docker\r\ndocker compose -f.build\/docker-compose.yml up --build \u2013detach\r\n<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-20195\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/22-300x196.png\" alt=\"\" width=\"562\" height=\"367\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/22-300x196.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/22-768x501.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/22-150x98.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/22.png 1001w\" sizes=\"(max-width: 562px) 100vw, 562px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u06a9\u0627\u0646\u062a\u06cc\u0646\u0631 Mutillidae\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0645\u0631\u0648\u0631\u06af\u0631 \u062e\u0648\u062f \u0628\u0647 \u0622\u062f\u0631\u0633 http:\/\/localhost:80 \u0645\u0631\u0627\u062c\u0639\u0647 \u06a9\u0646\u06cc\u062f. \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0642\u0637\u0647\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0641\u0639\u0627\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u0639\u0645\u0644\u06cc \u062a\u0633\u062a \u0646\u0641\u0648\u0630 \u062e\u0648\u062f \u0631\u0627 \u0622\u063a\u0627\u0632 \u0646\u0645\u0627\u06cc\u06cc\u062f.<\/span><br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-20196\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/23-300x239.png\" alt=\"\" width=\"560\" height=\"446\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/23-300x239.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/23-1024x817.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/23-768x613.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/23-150x120.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/23.png 1298w\" sizes=\"(max-width: 560px) 100vw, 560px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>Damn Vulnerable GraphQL Application<\/strong><\/span><\/p>\n<p><span style=\"font-size: 10pt\">Damn Vulnerable GraphQL Application \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u062a\u062d\u062a \u0648\u0628 \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 GraphQL \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0639\u0645\u062f\u06cc \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u0627\u0646\u0648\u0627\u0639 \u0645\u062e\u062a\u0644\u0641 \u062d\u0645\u0644\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0637\u0631\u0627\u062d\u06cc \u0634\u062f\u0647 \u0648 \u0645\u062d\u06cc\u0637\u06cc \u0627\u0645\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644\u200c\u0634\u062f\u0647 \u0628\u0631\u0627\u06cc \u0622\u0645\u0648\u0632\u0634 \u0627\u0645\u0646\u06cc\u062a GraphQL \u0648 \u062a\u0645\u0631\u06cc\u0646 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc Damn Vulnerable GraphQL Application \u062f\u0631 Docker\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u0645\u0627\u06cc\u06cc\u062f:<\/span><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\">docker pull dolevf\/dvga\r\ndocker run -t -p 5013:5013 -e WEB_HOST=0.0.0.0 dolevf\/dvga\r\n<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-20197\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/24-300x106.png\" alt=\"\" width=\"555\" height=\"196\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/24-300x106.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/24-768x271.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/24-150x53.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/24.png 998w\" sizes=\"(max-width: 555px) 100vw, 555px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u06a9\u0627\u0646\u062a\u06cc\u0646\u0631 Damn Vulnerable GraphQL Application\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0645\u0631\u0648\u0631\u06af\u0631 \u062e\u0648\u062f \u0628\u0647 \u0622\u062f\u0631\u0633 http:\/\/localhost:5013 \u0645\u0631\u0627\u062c\u0639\u0647 \u06a9\u0646\u06cc\u062f. \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0642\u0637\u0647\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0641\u0639\u0627\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u0639\u0645\u0644\u06cc \u062a\u0633\u062a \u0646\u0641\u0648\u0630 \u062e\u0648\u062f \u0631\u0627 \u0622\u063a\u0627\u0632 \u0646\u0645\u0627\u06cc\u06cc\u062f.<\/span><br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-20198\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/25-300x238.png\" alt=\"\" width=\"553\" height=\"439\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/25-300x238.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/25-1024x814.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/25-768x610.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/25-150x119.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/25.png 1344w\" sizes=\"(max-width: 553px) 100vw, 553px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>Damn Vulnerable RESTurant API<\/strong><\/span><\/p>\n<p><span style=\"font-size: 10pt\">Damn Vulnerable RESTurant API \u06cc\u06a9 RESTful API \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0639\u0645\u062f\u06cc \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u0627\u0646\u0648\u0627\u0639 \u0645\u062e\u062a\u0644\u0641 \u062d\u0645\u0644\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0637\u0631\u0627\u062d\u06cc \u0634\u062f\u0647 \u0648 \u0645\u062d\u06cc\u0637\u06cc \u0627\u0645\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644\u200c\u0634\u062f\u0647 \u0628\u0631\u0627\u06cc \u0622\u0645\u0648\u0632\u0634 \u0627\u0645\u0646\u06cc\u062a API \u0648 \u062a\u0645\u0631\u06cc\u0646 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0627\u06cc\u0646 \u0628\u0631\u0646\u0627\u0645\u0647 \u0645\u062c\u0645\u0648\u0639\u0647\u200c\u0627\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u062e\u0627\u0635 API \u0627\u0632 \u062c\u0645\u0644\u0647 \u0636\u0639\u0641\u200c\u0647\u0627\u06cc Authentication \u0648 Authorization \u0631\u0627 \u067e\u0648\u0634\u0634 \u0645\u06cc\u200c\u062f\u0647\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc Damn Vulnerable RESTurant API \u062f\u0631 Docker\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f:<\/span><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\">git clone https:\/\/github.com\/theowni\/Damn-Vulnerable-RESTaurant-API-Game.git\r\ncd Damn-Vulnerable-RESTaurant-API-Game\r\n.\/start_app.sh\r\n<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-20199\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/26-300x152.png\" alt=\"\" width=\"574\" height=\"291\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/26-300x152.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/26-1024x519.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/26-768x389.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/26-150x76.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/26.png 1103w\" sizes=\"(max-width: 574px) 100vw, 574px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u06a9\u0627\u0646\u062a\u06cc\u0646\u0631 Damn Vulnerable RESTurant API\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0645\u0631\u0648\u0631\u06af\u0631 \u062e\u0648\u062f \u0628\u0647 \u0622\u062f\u0631\u0633 http:\/\/localhost:8091\/docs \u0645\u0631\u0627\u062c\u0639\u0647 \u06a9\u0646\u06cc\u062f. \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0642\u0637\u0647\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0641\u0639\u0627\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u0639\u0645\u0644\u06cc \u062a\u0633\u062a \u0646\u0641\u0648\u0630 \u062e\u0648\u062f \u0631\u0627 \u0622\u063a\u0627\u0632 \u0646\u0645\u0627\u06cc\u06cc\u062f.<\/span><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-20200\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/27-300x235.png\" alt=\"\" width=\"571\" height=\"447\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/27-300x235.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/27-1024x802.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/27-768x602.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/27-150x118.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/27.png 1344w\" sizes=\"(max-width: 571px) 100vw, 571px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>Pixi<\/strong><\/span><\/p>\n<p><span style=\"font-size: 10pt\">Pixi \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u062a\u062d\u062a \u0648\u0628 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0639\u0645\u062f\u06cc \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u0627\u0646\u0648\u0627\u0639 \u0645\u062e\u062a\u0644\u0641 \u062d\u0645\u0644\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0637\u0631\u0627\u062d\u06cc \u0634\u062f\u0647 \u0648 \u0645\u062d\u06cc\u0637\u06cc \u0627\u0645\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644\u200c\u0634\u062f\u0647 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0622\u0645\u0648\u0632\u0634 \u0627\u0645\u0646\u06cc\u062a \u0648\u0628 \u0648 \u062a\u0645\u0631\u06cc\u0646 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc Pixi \u062f\u0631 Docker\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u0645\u0627\u06cc\u06cc\u062f:<\/span><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\">git clone https:\/\/github.com\/DevSlop\/Pixi.git\r\ncd Pixi\r\ndocker-compose up\r\n<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-20201\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/28-279x300.png\" alt=\"\" width=\"545\" height=\"586\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/28-279x300.png 279w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/28-768x827.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/28-150x162.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/28.png 846w\" sizes=\"(max-width: 545px) 100vw, 545px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u06a9\u0627\u0646\u062a\u06cc\u0646\u0631 Pixi\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0645\u0631\u0648\u0631\u06af\u0631 \u062e\u0648\u062f \u0628\u0647 \u0622\u062f\u0631\u0633 http:\/\/localhost:8000\/login \u0645\u0631\u0627\u062c\u0639\u0647 \u06a9\u0646\u06cc\u062f. \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0642\u0637\u0647\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0641\u0639\u0627\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u0639\u0645\u0644\u06cc \u062a\u0633\u062a \u0646\u0641\u0648\u0630 \u062e\u0648\u062f \u0631\u0627 \u0622\u063a\u0627\u0632 \u0646\u0645\u0627\u06cc\u06cc\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-20202\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/29-300x239.png\" alt=\"\" width=\"551\" height=\"439\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/29-300x239.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/29-1024x816.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/29-768x612.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/29-150x119.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/29.png 1342w\" sizes=\"(max-width: 551px) 100vw, 551px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>PyGoat<\/strong><\/span><br \/>\n<span style=\"font-size: 10pt\">PyGoat \u06cc\u06a9 Web Application \u0627\u0633\u062a \u06a9\u0647 \u0628\u0627 \u0647\u062f\u0641 \u0622\u0645\u0648\u0632\u0634 Web Application Security \u0637\u0631\u0627\u062d\u06cc \u0634\u062f\u0647 \u0648 \u0634\u0627\u0645\u0644 \u0645\u062c\u0645\u0648\u0639\u0647\u200c\u0627\u06cc \u0627\u0632 \u062f\u0631\u0633\u200c\u0647\u0627 \u0648 \u062a\u0645\u0631\u06cc\u0646\u200c\u0647\u0627 \u062f\u0631 \u062d\u0648\u0632\u0647\u200c\u0647\u0627\u06cc\u06cc \u0645\u0627\u0646\u0646\u062f Authentication\u060c Authorisation \u0648 Input Validation \u0645\u06cc\u200c\u0628\u0627\u0634\u062f. \u0627\u06cc\u0646 \u067e\u0644\u062a\u0641\u0631\u0645 \u06cc\u06a9 \u0645\u062d\u06cc\u0637 Hands-on \u0628\u0631\u0627\u06cc \u06cc\u0627\u062f\u06af\u06cc\u0631\u06cc \u0627\u0645\u0646\u06cc\u062a \u0648\u0628 \u0648 \u062a\u0645\u0631\u06cc\u0646 \u062f\u0631 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0648 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 Vulnerabilities \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0628\u0627 \u062a\u0645\u0631\u06a9\u0632 \u0648\u06cc\u0698\u0647 \u0628\u0631 Python-based Web Applications.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc Configure \u06a9\u0631\u062f\u0646 PyGoat \u0628\u0631 \u0631\u0648\u06cc Docker\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f:<\/span><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\">docker pull pygoat\/pygoat:latest\r\ndocker run --rm -p 8000:8000 pygoat\/pygoat:latest\r\n<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-20203\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/30-300x277.png\" alt=\"\" width=\"544\" height=\"502\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/30-300x277.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/30-768x709.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/30-150x139.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/30.png 971w\" sizes=\"(max-width: 544px) 100vw, 544px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 Start \u06a9\u0631\u062f\u0646 PyGoat Container\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0628\u0627 \u0645\u0631\u0627\u062c\u0639\u0647 \u0628\u0647 \u0622\u062f\u0631\u0633 http:\/\/localhost:8000\/login \u0627\u0632 \u0637\u0631\u06cc\u0642 Web Browser \u062e\u0648\u062f \u0628\u0647 \u0622\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u06cc\u062f. \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0642\u0637\u0647\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f Hands-on Testing Journey \u062e\u0648\u062f \u0631\u0627 \u0622\u063a\u0627\u0632 \u0646\u0645\u0627\u06cc\u06cc\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-20204\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/31-300x234.png\" alt=\"\" width=\"544\" height=\"424\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/31-300x234.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/31-1024x800.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/31-768x600.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/31-150x117.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/31.png 1306w\" sizes=\"(max-width: 544px) 100vw, 544px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>SSRF<\/strong><\/span><br \/>\n<span style=\"font-size: 10pt\">SSRF \u06cc\u06a9 Web Application \u0627\u0633\u062a \u06a9\u0647 \u0628\u0627 \u0647\u062f\u0641 \u0622\u0645\u0648\u0632\u0634 \u062d\u0645\u0644\u0627\u062a Server-Side Request Forgery (SSRF) \u0637\u0631\u0627\u062d\u06cc \u0634\u062f\u0647 \u0648 \u0645\u062c\u0645\u0648\u0639\u0647\u200c\u0627\u06cc \u0627\u0632 Challenges \u0648 Exercises \u0631\u0627 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f \u062a\u0627 \u0628\u062a\u0648\u0627\u0646\u0646\u062f \u062f\u0631 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0648 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 SSRF Vulnerabilities \u062a\u0645\u0631\u06cc\u0646 \u06a9\u0646\u0646\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc Configure \u06a9\u0631\u062f\u0646 SSRF \u0628\u0631 \u0631\u0648\u06cc Docker\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u0645\u0627\u06cc\u06cc\u062f:<\/span><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\">docker pull youyouorz\/ssrf-vulnerable-lab\r\ndocker run -d --name ssrf-lab -p 9000:80 youyouorz\/ssrf-vulnerable-lab\r\n<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-20205\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/32-300x214.png\" alt=\"\" width=\"561\" height=\"400\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/32-300x214.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/32-768x548.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/32-150x107.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/32.png 993w\" sizes=\"(max-width: 561px) 100vw, 561px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 Start \u06a9\u0631\u062f\u0646 SSRF Container\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0628\u0627 \u0645\u0631\u0627\u062c\u0639\u0647 \u0628\u0647 \u0622\u062f\u0631\u0633 http:\/\/localhost:9000 \u0627\u0632 \u0637\u0631\u06cc\u0642 Web Browser \u062e\u0648\u062f \u0628\u0647 \u0622\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u06cc\u062f. \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0642\u0637\u0647\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f Hands-on Testing Journey \u062e\u0648\u062f \u0631\u0627 \u0622\u063a\u0627\u0632 \u0646\u0645\u0627\u06cc\u06cc\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-20206\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/33-300x230.png\" alt=\"\" width=\"563\" height=\"432\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/33-300x230.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/33-1024x786.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/33-768x589.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/33-390x300.png 390w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/33-150x115.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/33.png 1324w\" sizes=\"(max-width: 563px) 100vw, 563px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>VulnBank<\/strong><\/span><br \/>\n<span style=\"font-size: 10pt\">VulnBank \u06cc\u06a9 Web Application \u0627\u0633\u062a \u06a9\u0647 \u0628\u0627 \u0647\u062f\u0641 \u0634\u0628\u06cc\u0647\u200c\u0633\u0627\u0632\u06cc \u06cc\u06a9 Vulnerable Online Banking System \u0637\u0631\u0627\u062d\u06cc \u0634\u062f\u0647 \u0648 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u062f\u0631 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 Common Web Vulnerabilities \u0645\u0627\u0646\u0646\u062f SQL Injection \u0648 Cross-Site Scripting (XSS) \u062a\u0645\u0631\u06cc\u0646 \u06a9\u0646\u0646\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc Configure \u06a9\u0631\u062f\u0646 VulnBank \u0628\u0631 \u0631\u0648\u06cc Docker\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u0645\u0627\u06cc\u06cc\u062f:<\/span><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\">git clone https:\/\/github.com\/Commando-X\/vuln-bank.git\r\ncd vuln-bank\r\ndocker-compose up\r\n<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-20207\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/34-300x249.png\" alt=\"\" width=\"560\" height=\"465\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/34-300x249.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/34-768x636.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/34-150x124.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/34.png 962w\" sizes=\"(max-width: 560px) 100vw, 560px\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-20208\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/35-300x73.png\" alt=\"\" width=\"559\" height=\"136\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/35-300x73.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/35-1024x249.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/35-768x187.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/35-150x36.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/35.png 1268w\" sizes=\"(max-width: 559px) 100vw, 559px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 Start \u06a9\u0631\u062f\u0646 VulnBank Container\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0628\u0627 \u0645\u0631\u0627\u062c\u0639\u0647 \u0628\u0647 \u0622\u062f\u0631\u0633 http:\/\/172.24.0.3:5000 \u0627\u0632 \u0637\u0631\u06cc\u0642 Web Browser \u062e\u0648\u062f \u0628\u0647 \u0622\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u06cc\u062f. \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0642\u0637\u0647\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f Hands-on Testing Journey \u062e\u0648\u062f \u0631\u0627 \u0622\u063a\u0627\u0632 \u0646\u0645\u0627\u06cc\u06cc\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-20209\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/36-300x239.png\" alt=\"\" width=\"554\" height=\"441\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/36-300x239.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/36-1024x815.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/36-768x611.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/36-150x119.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/36.png 1351w\" sizes=\"(max-width: 554px) 100vw, 554px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>VulnLab<\/strong><\/span><br \/>\n<span style=\"font-size: 10pt\">VulnLab \u06cc\u06a9 Web Application \u0627\u0633\u062a \u06a9\u0647 \u0628\u0627 \u0647\u062f\u0641 \u0641\u0631\u0627\u0647\u0645 \u06a9\u0631\u062f\u0646 \u06cc\u06a9 \u0645\u062d\u06cc\u0637 Hands-on \u0628\u0631\u0627\u06cc \u06cc\u0627\u062f\u06af\u06cc\u0631\u06cc Web Security \u0648 \u062a\u0645\u0631\u06cc\u0646 \u062f\u0631 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 Vulnerabilities \u0637\u0631\u0627\u062d\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u067e\u0644\u062a\u0641\u0631\u0645 \u0645\u062c\u0645\u0648\u0639\u0647\u200c\u0627\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0627\u0632 \u062c\u0645\u0644\u0647 SQL Injection\u060c XSS \u0648 File Inclusion \u0631\u0627 \u067e\u0648\u0634\u0634 \u0645\u06cc\u200c\u062f\u0647\u062f \u0648 \u0628\u0647 \u062f\u0644\u06cc\u0644 Realistic \u0648 Challenging Scenarios \u062e\u0648\u062f \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc Configure \u06a9\u0631\u062f\u0646 VulnLab \u0628\u0631 \u0631\u0648\u06cc Docker\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f:<\/span><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\">docker pull yavuzlar\/vulnlab\r\ndocker run -d -p 1337:80 yavuzlar\/vulnlab\r\n<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-20210\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/37-300x96.png\" alt=\"\" width=\"544\" height=\"174\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/37-300x96.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/37-768x246.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/37-150x48.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/37.png 842w\" sizes=\"(max-width: 544px) 100vw, 544px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 Start \u06a9\u0631\u062f\u0646 VulnLab Container\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0628\u0627 \u0645\u0631\u0627\u062c\u0639\u0647 \u0628\u0647 \u0622\u062f\u0631\u0633 http:\/\/localhost:1337 \u0627\u0632 \u0637\u0631\u06cc\u0642 Web Browser \u062e\u0648\u062f \u0628\u0647 \u0622\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u06cc\u062f. \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0642\u0637\u0647\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f Hands-on Testing Journey \u062e\u0648\u062f \u0631\u0627 \u0622\u063a\u0627\u0632 \u0646\u0645\u0627\u06cc\u06cc\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-20211\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/38-300x205.png\" alt=\"\" width=\"553\" height=\"378\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/38-300x205.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/38-1024x699.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/38-768x525.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/38-150x102.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/38.png 1328w\" sizes=\"(max-width: 553px) 100vw, 553px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>WrongSecrets<\/strong><\/span><br \/>\n<span style=\"font-size: 10pt\">WrongSecrets \u06cc\u06a9 Web Application \u0627\u0633\u062a \u06a9\u0647 \u0628\u0627 \u0647\u062f\u0641 \u0622\u0645\u0648\u0632\u0634 \u0645\u0641\u0627\u0647\u06cc\u0645 Secrets Management \u0648 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u0635\u062d\u06cc\u062d \u0630\u062e\u06cc\u0631\u0647\u200c\u0633\u0627\u0632\u06cc \u0648 \u0645\u062f\u06cc\u0631\u06cc\u062a Sensitive Data \u0637\u0631\u0627\u062d\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc Configure \u06a9\u0631\u062f\u0646 WrongSecrets \u0628\u0631 \u0631\u0648\u06cc Docker\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f:<\/span><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\">docker run -p 8080:8080 jeroenwillemsen\/wrongsecrets:latest-no-vault<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-20212\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/39-300x284.png\" alt=\"\" width=\"543\" height=\"514\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/39-300x284.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/39-768x726.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/39-150x142.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/39.png 1013w\" sizes=\"(max-width: 543px) 100vw, 543px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 Start \u06a9\u0631\u062f\u0646 WrongSecrets Container\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0628\u0627 \u0645\u0631\u0627\u062c\u0639\u0647 \u0628\u0647 \u0622\u062f\u0631\u0633 http:\/\/localhost:8080 \u0627\u0632 \u0637\u0631\u06cc\u0642 Web Browser \u062e\u0648\u062f \u0628\u0647 \u0622\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u06cc\u062f. \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0642\u0637\u0647\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f Hands-on Testing Journey \u062e\u0648\u062f \u0631\u0627 \u0622\u063a\u0627\u0632 \u0646\u0645\u0627\u06cc\u06cc\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-20213\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/40-300x243.png\" alt=\"\" width=\"552\" height=\"447\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/40-300x243.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/40-1024x830.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/40-768x623.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/40-150x122.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/40.png 1336w\" sizes=\"(max-width: 552px) 100vw, 552px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>Yrprey<\/strong><\/span><br \/>\n<span style=\"font-size: 10pt\">Yrprey \u06cc\u06a9 Web Application \u0627\u0633\u062a \u06a9\u0647 \u0628\u0627 \u0647\u062f\u0641 \u0634\u0628\u06cc\u0647\u200c\u0633\u0627\u0632\u06cc \u06cc\u06a9 \u0648\u0628\u200c\u0627\u067e\u0644\u06cc\u06a9\u06cc\u0634\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0637\u0631\u0627\u062d\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0645\u062d\u06cc\u0637 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u062f\u0631 \u06cc\u06a9 \u0641\u0636\u0627\u06cc \u06a9\u0646\u062a\u0631\u0644\u200c\u0634\u062f\u0647\u060c \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc (Exploitation) \u0627\u0632 Web Vulnerabilities \u0631\u0627\u06cc\u062c \u0645\u0627\u0646\u0646\u062f SQL Injection \u0648 Cross-Site Scripting (XSS) \u0631\u0627 \u062a\u0645\u0631\u06cc\u0646 \u06a9\u0646\u0646\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc Configure \u06a9\u0631\u062f\u0646 Yrprey \u062f\u0631 \u0645\u062d\u06cc\u0637 Docker\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f:<\/span><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\">git clone https:\/\/github.com\/yrprey\/yrprey-application.git\r\ncd yrprey-application\r\ndocker-compose -f.docker\/dev\/app.yaml -p yrprey up -d\r\n<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-20214\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/41-300x214.png\" alt=\"\" width=\"541\" height=\"386\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/41-300x214.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/41-768x549.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/41-150x107.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/41.png 964w\" sizes=\"(max-width: 541px) 100vw, 541px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 Start \u06a9\u0631\u062f\u0646 Yrprey Container\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0645\u0631\u0648\u0631\u06af\u0631 \u0648\u0628 \u062e\u0648\u062f \u0648 \u0628\u0627 \u0645\u0631\u0627\u062c\u0639\u0647 \u0628\u0647 \u0622\u062f\u0631\u0633 <a href=\"http:\/\/localhost:3005\">http:\/\/localhost:3005<\/a> \u0628\u0647 \u0622\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u06cc\u062f. \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0642\u0637\u0647\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0641\u0631\u0622\u06cc\u0646\u062f Hands-on Testing \u062e\u0648\u062f \u0631\u0627 \u0622\u063a\u0627\u0632 \u0646\u0645\u0627\u06cc\u06cc\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-20215\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/42-300x261.png\" alt=\"\" width=\"548\" height=\"477\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/42-300x261.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/42-1024x891.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/42-768x669.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/42-150x131.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/42.png 1235w\" sizes=\"(max-width: 548px) 100vw, 548px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>Zero Health<\/strong><\/span><br \/>\n<span style=\"font-size: 10pt\">Zero Health \u06cc\u06a9 Web Application \u0627\u0633\u062a \u06a9\u0647 \u0628\u0627 \u0647\u062f\u0641 \u0634\u0628\u06cc\u0647\u200c\u0633\u0627\u0632\u06cc \u06cc\u06a9 \u0633\u06cc\u0633\u062a\u0645 \u0628\u0647\u062f\u0627\u0634\u062a\u06cc \u0648 \u062f\u0631\u0645\u0627\u0646\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0637\u0631\u0627\u062d\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0645\u062d\u06cc\u0637 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u062f\u0631 \u06cc\u06a9 \u0628\u0633\u062a\u0631 \u06a9\u0646\u062a\u0631\u0644\u200c\u0634\u062f\u0647\u060c \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc (Exploitation) \u0627\u0632 Web Vulnerabilities \u0631\u0627\u06cc\u062c \u0645\u0627\u0646\u0646\u062f SQL Injection \u0648 Cross-Site Scripting (XSS) \u0631\u0627 \u062a\u0645\u0631\u06cc\u0646 \u06a9\u0646\u0646\u062f.<\/span><\/p>\n<p><span style=\"font-size: 10pt\">\u0628\u0631\u0627\u06cc Configure \u06a9\u0631\u062f\u0646 Zero Health \u062f\u0631 \u0645\u062d\u06cc\u0637 Docker\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f:<\/span><\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"generic\">git clone https:\/\/github.com\/aligorithm\/zero-health.git\r\ncd zero-health\r\ndocker-compose up\r\n<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-20216\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/43-300x254.png\" alt=\"\" width=\"541\" height=\"458\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/43-300x254.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/43-768x651.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/43-150x127.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/43.png 856w\" sizes=\"(max-width: 541px) 100vw, 541px\" \/><\/p>\n<p><span style=\"font-size: 10pt\">\u067e\u0633 \u0627\u0632 Start \u06a9\u0631\u062f\u0646 Zero Health Container\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0645\u0631\u0648\u0631\u06af\u0631 \u0648\u0628 \u062e\u0648\u062f \u0648 \u0628\u0627 \u0645\u0631\u0627\u062c\u0639\u0647 \u0628\u0647 \u0622\u062f\u0631\u0633 <a href=\"http:\/\/localhost:3000\">http:\/\/localhost:3000<\/a> \u0628\u0647 \u0622\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u06cc\u062f. \u0627\u0632 \u0627\u06cc\u0646 \u0645\u0631\u062d\u0644\u0647\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0641\u0631\u0622\u06cc\u0646\u062f Hands-on Testing \u062e\u0648\u062f \u0631\u0627 \u0622\u063a\u0627\u0632 \u0646\u0645\u0627\u06cc\u06cc\u062f.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-20217\" src=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/44-300x237.png\" alt=\"\" width=\"534\" height=\"422\" srcset=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/44-300x237.png 300w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/44-1024x807.png 1024w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/44-768x606.png 768w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/44-150x118.png 150w, https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/44.png 1333w\" sizes=\"(max-width: 534px) 100vw, 534px\" \/><\/p>\n<p><span style=\"font-size: 10pt\"><strong>\u0646\u062a\u06cc\u062c\u0647 \u06af\u06cc\u0631\u06cc<\/strong> <\/span><br \/>\n<span style=\"font-size: 10pt\">\u0648\u0628\u200c\u0627\u067e\u0644\u06cc\u06a9\u06cc\u0634\u0646\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u060c \u0641\u0631\u0635\u062a\u200c\u0647\u0627\u06cc Hands-on \u0627\u0631\u0632\u0634\u0645\u0646\u062f\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0647\u0631 \u062f\u0648 \u062a\u06cc\u0645 Red Team \u0648 Blue Team \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u062a\u0627 \u0645\u0647\u0627\u0631\u062a\u200c\u0647\u0627\u06cc \u062e\u0648\u062f \u0631\u0627 \u0627\u0631\u062a\u0642\u0627\u0621 \u062f\u0647\u0646\u062f. \u0628\u0627 Mapping \u0627\u06cc\u0646 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627 \u0628\u0647 \u0686\u0627\u0631\u0686\u0648\u0628 MITRE ATT&amp;CK\u060c \u0645\u062a\u062e\u0635\u0635\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f Real-world Attack Chains \u0631\u0627 \u0634\u0628\u06cc\u0647\u200c\u0633\u0627\u0632\u06cc \u06a9\u0631\u062f\u0647 \u0648 \u0648\u0636\u0639\u06cc\u062a \u062f\u0641\u0627\u0639\u06cc (Defense Posture) \u062e\u0648\u062f \u0631\u0627 \u0628\u0647\u0628\u0648\u062f \u0628\u062e\u0634\u0646\u062f.<\/span><br \/>\n<span style=\"font-size: 10pt\">Docker \u0641\u0631\u0622\u06cc\u0646\u062f Deploy \u06a9\u0631\u062f\u0646 \u0627\u06cc\u0646 Labs \u0631\u0627 \u0622\u0633\u0627\u0646 \u0648 \u0642\u0627\u0628\u0644 \u062a\u06a9\u0631\u0627\u0631 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0686\u0647 \u062f\u0631 \u062d\u0627\u0644 \u062a\u0633\u062a XSS\u060c SQLi \u06cc\u0627 API Abuse \u0628\u0627\u0634\u06cc\u062f\u060c \u0647\u0645\u0648\u0627\u0631\u0647 \u0628\u0627\u06cc\u062f \u062f\u0633\u062a\u0648\u0631\u0627\u0644\u0639\u0645\u0644\u200c\u0647\u0627\u06cc \u0627\u062e\u0644\u0627\u0642\u06cc (Ethical Guidelines) \u0631\u0627 \u0631\u0639\u0627\u06cc\u062a \u06a9\u0631\u062f\u0647 \u0648 \u0627\u0632 \u0627\u06cc\u0646 \u0645\u062d\u06cc\u0637\u200c\u0647\u0627 \u0635\u0631\u0641\u0627\u064b \u062f\u0631 \u0628\u0633\u062a\u0631\u0647\u0627\u06cc \u0627\u06cc\u0632\u0648\u0644\u0647 (Isolated Environments) \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u062f\u0631 \u062d\u0648\u0632\u0647 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc\u060c Penetration Testing \u0648 Vulnerability Assessment \u0627\u0632 \u06af\u0627\u0645\u200c\u0647\u0627\u06cc \u06a9\u0644\u06cc\u062f\u06cc \u0628\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0648 \u06a9\u0627\u0647\u0634 \u062a\u0647\u062f\u06cc\u062f\u0627\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0627\u0644\u0642\u0648\u0647 \u0645\u062d\u0633\u0648\u0628 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f. \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0627\u0641\u0632\u0627\u06cc\u0634 \u0686\u0634\u0645\u06af\u06cc\u0631 \u062a\u0639\u062f\u0627\u062f \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u062a\u062d\u062a \u0648\u0628\u060c \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0645\u062d\u06cc\u0637\u200c\u0647\u0627\u06cc \u0622\u0632\u0645\u0627\u06cc\u0634\u06cc \u0627\u0645\u0646 \u0648 \u067e\u0627\u06cc\u062f\u0627\u0631 \u0628\u06cc\u0634 \u0627\u0632 \u0647\u0631 \u0632\u0645\u0627\u0646 \u062f\u06cc\u06af\u0631\u06cc \u0627\u0647\u0645\u06cc\u062a \u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u062f\u0631 \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647\u060c \u0628\u0647 \u0628\u0631\u0631\u0633\u06cc \u0645\u0641\u0647\u0648\u0645 Vulnerable Web Applications\u060c &hellip;<\/p>\n","protected":false},"author":14,"featured_media":20218,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[258,2,293,349],"tags":[],"class_list":["post-20160","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-teaching","category-pentest","category-293","category-slides"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.5 (Yoast SEO v27.6) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>\u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0622\u0632\u0645\u0627\u06cc\u0634\u06af\u0627\u0647 Web Application Pentest \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Docker - \u0628\u0644\u0627\u06af \u06af\u0631\u0648\u0647 \u0644\u06cc\u0627\u0646<\/title>\n<meta name=\"description\" content=\"\u062f\u0631 \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647\u060c \u0628\u0647 \u0628\u0631\u0631\u0633\u06cc \u0645\u0641\u0647\u0648\u0645 Vulnerable Web Applications\u060c \u0627\u0647\u0645\u06cc\u062a \u0622\u0646\u200c\u0647\u0627 \u062f\u0631 \u0641\u0631\u0622\u06cc\u0646\u062f Penetration Testing\u060c \u0648 \u0646\u062d\u0648\u0647 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0627\u06cc\u0646 \u0645\u062d\u06cc\u0637\u200c\u0647\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Docker \u062e\u0648\u0627\u0647\u06cc\u0645 \u067e\u0631\u062f\u0627\u062e\u062a.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/liangroup.net\/blog\/web-application-pentest-lab-setup-using-docker\/\" \/>\n<meta property=\"og:locale\" content=\"fa_IR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0622\u0632\u0645\u0627\u06cc\u0634\u06af\u0627\u0647 Web Application Pentest \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Docker\" \/>\n<meta property=\"og:description\" content=\"\u062f\u0631 \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647\u060c \u0628\u0647 \u0628\u0631\u0631\u0633\u06cc \u0645\u0641\u0647\u0648\u0645 Vulnerable Web Applications\u060c \u0627\u0647\u0645\u06cc\u062a \u0622\u0646\u200c\u0647\u0627 \u062f\u0631 \u0641\u0631\u0622\u06cc\u0646\u062f Penetration Testing\u060c \u0648 \u0646\u062d\u0648\u0647 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0627\u06cc\u0646 \u0645\u062d\u06cc\u0637\u200c\u0647\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Docker \u062e\u0648\u0627\u0647\u06cc\u0645 \u067e\u0631\u062f\u0627\u062e\u062a.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/liangroup.net\/blog\/web-application-pentest-lab-setup-using-docker\/\" \/>\n<meta property=\"og:site_name\" content=\"\u0628\u0644\u0627\u06af \u06af\u0631\u0648\u0647 \u0644\u06cc\u0627\u0646\" \/>\n<meta property=\"article:published_time\" content=\"2025-08-10T13:00:48+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/nn.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"800\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"\u0633\u062c\u0627\u062f \u062a\u06cc\u0645\u0648\u0631\u06cc\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@liansecurity\" \/>\n<meta name=\"twitter:site\" content=\"@liansecurity\" \/>\n<meta name=\"twitter:label1\" content=\"\u0646\u0648\u0634\u062a\u0647\u200c\u0634\u062f\u0647 \u0628\u062f\u0633\u062a\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u0633\u062c\u0627\u062f \u062a\u06cc\u0645\u0648\u0631\u06cc\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u0632\u0645\u0627\u0646 \u062a\u0642\u0631\u06cc\u0628\u06cc \u0628\u0631\u0627\u06cc \u062e\u0648\u0627\u0646\u062f\u0646\" \/>\n\t<meta name=\"twitter:data2\" content=\"21 \u062f\u0642\u06cc\u0642\u0647\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/web-application-pentest-lab-setup-using-docker\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/web-application-pentest-lab-setup-using-docker\\\/\"},\"author\":{\"name\":\"\u0633\u062c\u0627\u062f \u062a\u06cc\u0645\u0648\u0631\u06cc\",\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/#\\\/schema\\\/person\\\/e328f67a35a843fd3accc4666b5eab0a\"},\"headline\":\"\u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0622\u0632\u0645\u0627\u06cc\u0634\u06af\u0627\u0647 Web Application Pentest \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Docker\",\"datePublished\":\"2025-08-10T13:00:48+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/web-application-pentest-lab-setup-using-docker\\\/\"},\"wordCount\":516,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/web-application-pentest-lab-setup-using-docker\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/nn.webp\",\"articleSection\":[\"\u0622\u0645\u0648\u0632\u0634\u200c\u0647\u0627\u06cc \u0644\u06cc\u0627\u0646\",\"\u062a\u0633\u062a \u0646\u0641\u0648\u0630 \u0648 \u0627\u0645\u0646\u06cc\u062a\",\"\u0645\u0642\u0627\u0644\u0627\u062a \u062a\u0633\u062a \u0646\u0641\u0648\u0630 \u0648\u0628\",\"\u06cc\u06cc\u06cc\u06cc \u0627\u0633\u0644\u0627\u06cc\u062f\"],\"inLanguage\":\"fa-IR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/liangroup.net\\\/blog\\\/web-application-pentest-lab-setup-using-docker\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/web-application-pentest-lab-setup-using-docker\\\/\",\"url\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/web-application-pentest-lab-setup-using-docker\\\/\",\"name\":\"\u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0622\u0632\u0645\u0627\u06cc\u0634\u06af\u0627\u0647 Web Application Pentest \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Docker - \u0628\u0644\u0627\u06af \u06af\u0631\u0648\u0647 \u0644\u06cc\u0627\u0646\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/web-application-pentest-lab-setup-using-docker\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/web-application-pentest-lab-setup-using-docker\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/nn.webp\",\"datePublished\":\"2025-08-10T13:00:48+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/#\\\/schema\\\/person\\\/e328f67a35a843fd3accc4666b5eab0a\"},\"description\":\"\u062f\u0631 \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647\u060c \u0628\u0647 \u0628\u0631\u0631\u0633\u06cc \u0645\u0641\u0647\u0648\u0645 Vulnerable Web Applications\u060c \u0627\u0647\u0645\u06cc\u062a \u0622\u0646\u200c\u0647\u0627 \u062f\u0631 \u0641\u0631\u0622\u06cc\u0646\u062f Penetration Testing\u060c \u0648 \u0646\u062d\u0648\u0647 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0627\u06cc\u0646 \u0645\u062d\u06cc\u0637\u200c\u0647\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Docker \u062e\u0648\u0627\u0647\u06cc\u0645 \u067e\u0631\u062f\u0627\u062e\u062a.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/web-application-pentest-lab-setup-using-docker\\\/#breadcrumb\"},\"inLanguage\":\"fa-IR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/liangroup.net\\\/blog\\\/web-application-pentest-lab-setup-using-docker\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fa-IR\",\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/web-application-pentest-lab-setup-using-docker\\\/#primaryimage\",\"url\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/nn.webp\",\"contentUrl\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/nn.webp\",\"width\":1200,\"height\":800,\"caption\":\"\u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0622\u0632\u0645\u0627\u06cc\u0634\u06af\u0627\u0647 Web Application Pentest \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Docker\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/web-application-pentest-lab-setup-using-docker\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u062e\u0627\u0646\u0647\",\"item\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0622\u0632\u0645\u0627\u06cc\u0634\u06af\u0627\u0647 Web Application Pentest \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Docker\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/\",\"name\":\"\u0628\u0644\u0627\u06af \u06af\u0631\u0648\u0647 \u0644\u06cc\u0627\u0646\",\"description\":\"\u0622\u062e\u0631\u06cc\u0646 \u0627\u062e\u0628\u0627\u0631\u060c\u0645\u0642\u0627\u0644\u0627\u062a \u0648 \u0622\u0645\u0648\u0632\u0634\u200c\u0647\u0627\u06cc \u062d\u0648\u0632\u0647 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fa-IR\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/#\\\/schema\\\/person\\\/e328f67a35a843fd3accc4666b5eab0a\",\"name\":\"\u0633\u062c\u0627\u062f \u062a\u06cc\u0645\u0648\u0631\u06cc\",\"sameAs\":[\"https:\\\/\\\/liangroup.net\"],\"url\":\"https:\\\/\\\/liangroup.net\\\/blog\\\/author\\\/s-teymouri\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0622\u0632\u0645\u0627\u06cc\u0634\u06af\u0627\u0647 Web Application Pentest \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Docker - \u0628\u0644\u0627\u06af \u06af\u0631\u0648\u0647 \u0644\u06cc\u0627\u0646","description":"\u062f\u0631 \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647\u060c \u0628\u0647 \u0628\u0631\u0631\u0633\u06cc \u0645\u0641\u0647\u0648\u0645 Vulnerable Web Applications\u060c \u0627\u0647\u0645\u06cc\u062a \u0622\u0646\u200c\u0647\u0627 \u062f\u0631 \u0641\u0631\u0622\u06cc\u0646\u062f Penetration Testing\u060c \u0648 \u0646\u062d\u0648\u0647 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0627\u06cc\u0646 \u0645\u062d\u06cc\u0637\u200c\u0647\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Docker \u062e\u0648\u0627\u0647\u06cc\u0645 \u067e\u0631\u062f\u0627\u062e\u062a.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/liangroup.net\/blog\/web-application-pentest-lab-setup-using-docker\/","og_locale":"fa_IR","og_type":"article","og_title":"\u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0622\u0632\u0645\u0627\u06cc\u0634\u06af\u0627\u0647 Web Application Pentest \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Docker","og_description":"\u062f\u0631 \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647\u060c \u0628\u0647 \u0628\u0631\u0631\u0633\u06cc \u0645\u0641\u0647\u0648\u0645 Vulnerable Web Applications\u060c \u0627\u0647\u0645\u06cc\u062a \u0622\u0646\u200c\u0647\u0627 \u062f\u0631 \u0641\u0631\u0622\u06cc\u0646\u062f Penetration Testing\u060c \u0648 \u0646\u062d\u0648\u0647 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0627\u06cc\u0646 \u0645\u062d\u06cc\u0637\u200c\u0647\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Docker \u062e\u0648\u0627\u0647\u06cc\u0645 \u067e\u0631\u062f\u0627\u062e\u062a.","og_url":"https:\/\/liangroup.net\/blog\/web-application-pentest-lab-setup-using-docker\/","og_site_name":"\u0628\u0644\u0627\u06af \u06af\u0631\u0648\u0647 \u0644\u06cc\u0627\u0646","article_published_time":"2025-08-10T13:00:48+00:00","og_image":[{"width":1200,"height":800,"url":"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/nn.webp","type":"image\/webp"}],"author":"\u0633\u062c\u0627\u062f \u062a\u06cc\u0645\u0648\u0631\u06cc","twitter_card":"summary_large_image","twitter_creator":"@liansecurity","twitter_site":"@liansecurity","twitter_misc":{"\u0646\u0648\u0634\u062a\u0647\u200c\u0634\u062f\u0647 \u0628\u062f\u0633\u062a":"\u0633\u062c\u0627\u062f \u062a\u06cc\u0645\u0648\u0631\u06cc","\u0632\u0645\u0627\u0646 \u062a\u0642\u0631\u06cc\u0628\u06cc \u0628\u0631\u0627\u06cc \u062e\u0648\u0627\u0646\u062f\u0646":"21 \u062f\u0642\u06cc\u0642\u0647"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/liangroup.net\/blog\/web-application-pentest-lab-setup-using-docker\/#article","isPartOf":{"@id":"https:\/\/liangroup.net\/blog\/web-application-pentest-lab-setup-using-docker\/"},"author":{"name":"\u0633\u062c\u0627\u062f \u062a\u06cc\u0645\u0648\u0631\u06cc","@id":"https:\/\/liangroup.net\/blog\/#\/schema\/person\/e328f67a35a843fd3accc4666b5eab0a"},"headline":"\u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0622\u0632\u0645\u0627\u06cc\u0634\u06af\u0627\u0647 Web Application Pentest \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Docker","datePublished":"2025-08-10T13:00:48+00:00","mainEntityOfPage":{"@id":"https:\/\/liangroup.net\/blog\/web-application-pentest-lab-setup-using-docker\/"},"wordCount":516,"commentCount":0,"image":{"@id":"https:\/\/liangroup.net\/blog\/web-application-pentest-lab-setup-using-docker\/#primaryimage"},"thumbnailUrl":"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/nn.webp","articleSection":["\u0622\u0645\u0648\u0632\u0634\u200c\u0647\u0627\u06cc \u0644\u06cc\u0627\u0646","\u062a\u0633\u062a \u0646\u0641\u0648\u0630 \u0648 \u0627\u0645\u0646\u06cc\u062a","\u0645\u0642\u0627\u0644\u0627\u062a \u062a\u0633\u062a \u0646\u0641\u0648\u0630 \u0648\u0628","\u06cc\u06cc\u06cc\u06cc \u0627\u0633\u0644\u0627\u06cc\u062f"],"inLanguage":"fa-IR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/liangroup.net\/blog\/web-application-pentest-lab-setup-using-docker\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/liangroup.net\/blog\/web-application-pentest-lab-setup-using-docker\/","url":"https:\/\/liangroup.net\/blog\/web-application-pentest-lab-setup-using-docker\/","name":"\u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0622\u0632\u0645\u0627\u06cc\u0634\u06af\u0627\u0647 Web Application Pentest \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Docker - \u0628\u0644\u0627\u06af \u06af\u0631\u0648\u0647 \u0644\u06cc\u0627\u0646","isPartOf":{"@id":"https:\/\/liangroup.net\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/liangroup.net\/blog\/web-application-pentest-lab-setup-using-docker\/#primaryimage"},"image":{"@id":"https:\/\/liangroup.net\/blog\/web-application-pentest-lab-setup-using-docker\/#primaryimage"},"thumbnailUrl":"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/nn.webp","datePublished":"2025-08-10T13:00:48+00:00","author":{"@id":"https:\/\/liangroup.net\/blog\/#\/schema\/person\/e328f67a35a843fd3accc4666b5eab0a"},"description":"\u062f\u0631 \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647\u060c \u0628\u0647 \u0628\u0631\u0631\u0633\u06cc \u0645\u0641\u0647\u0648\u0645 Vulnerable Web Applications\u060c \u0627\u0647\u0645\u06cc\u062a \u0622\u0646\u200c\u0647\u0627 \u062f\u0631 \u0641\u0631\u0622\u06cc\u0646\u062f Penetration Testing\u060c \u0648 \u0646\u062d\u0648\u0647 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0627\u06cc\u0646 \u0645\u062d\u06cc\u0637\u200c\u0647\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Docker \u062e\u0648\u0627\u0647\u06cc\u0645 \u067e\u0631\u062f\u0627\u062e\u062a.","breadcrumb":{"@id":"https:\/\/liangroup.net\/blog\/web-application-pentest-lab-setup-using-docker\/#breadcrumb"},"inLanguage":"fa-IR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/liangroup.net\/blog\/web-application-pentest-lab-setup-using-docker\/"]}]},{"@type":"ImageObject","inLanguage":"fa-IR","@id":"https:\/\/liangroup.net\/blog\/web-application-pentest-lab-setup-using-docker\/#primaryimage","url":"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/nn.webp","contentUrl":"https:\/\/liangroup.net\/blog\/wp-content\/uploads\/2025\/08\/nn.webp","width":1200,"height":800,"caption":"\u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0622\u0632\u0645\u0627\u06cc\u0634\u06af\u0627\u0647 Web Application Pentest \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Docker"},{"@type":"BreadcrumbList","@id":"https:\/\/liangroup.net\/blog\/web-application-pentest-lab-setup-using-docker\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u062e\u0627\u0646\u0647","item":"https:\/\/liangroup.net\/blog\/"},{"@type":"ListItem","position":2,"name":"\u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0622\u0632\u0645\u0627\u06cc\u0634\u06af\u0627\u0647 Web Application Pentest \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Docker"}]},{"@type":"WebSite","@id":"https:\/\/liangroup.net\/blog\/#website","url":"https:\/\/liangroup.net\/blog\/","name":"\u0628\u0644\u0627\u06af \u06af\u0631\u0648\u0647 \u0644\u06cc\u0627\u0646","description":"\u0622\u062e\u0631\u06cc\u0646 \u0627\u062e\u0628\u0627\u0631\u060c\u0645\u0642\u0627\u0644\u0627\u062a \u0648 \u0622\u0645\u0648\u0632\u0634\u200c\u0647\u0627\u06cc \u062d\u0648\u0632\u0647 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/liangroup.net\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fa-IR"},{"@type":"Person","@id":"https:\/\/liangroup.net\/blog\/#\/schema\/person\/e328f67a35a843fd3accc4666b5eab0a","name":"\u0633\u062c\u0627\u062f \u062a\u06cc\u0645\u0648\u0631\u06cc","sameAs":["https:\/\/liangroup.net"],"url":"https:\/\/liangroup.net\/blog\/author\/s-teymouri\/"}]}},"_links":{"self":[{"href":"https:\/\/liangroup.net\/blog\/wp-json\/wp\/v2\/posts\/20160","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/liangroup.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/liangroup.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/liangroup.net\/blog\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/liangroup.net\/blog\/wp-json\/wp\/v2\/comments?post=20160"}],"version-history":[{"count":0,"href":"https:\/\/liangroup.net\/blog\/wp-json\/wp\/v2\/posts\/20160\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/liangroup.net\/blog\/wp-json\/wp\/v2\/media\/20218"}],"wp:attachment":[{"href":"https:\/\/liangroup.net\/blog\/wp-json\/wp\/v2\/media?parent=20160"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/liangroup.net\/blog\/wp-json\/wp\/v2\/categories?post=20160"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/liangroup.net\/blog\/wp-json\/wp\/v2\/tags?post=20160"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}