Nova Web Security Labs
· One min read
Cyber Security Trainer && Bug Bounty Hunter
Nova Web Security Labs For Web Pen-testing Learners By Yell Phone Naing
Installation For Linux
apt update
apt install docker*
cd ~ && wget https://raw.githubusercontent.com/yellphonenaing/WebHackingLiveClass/main/LabInstallation/novawebseclab.sh
sudo bash ~/novawebseclab.sh start
Vulnerabilities :-
- Command Injection
- Cross Site Request Forgery
- Server Side Request Forgery
- Arbitrary File Upload
- File Inclusion
- Remote Code Execution
- Host Header Injection
- Playing with htaccess
- Insecure Deserialization
- Broken Authentication and Authorization
- Sensitive Data Exposure
- Security Headers Misconfiguration
- Race Conditions
- Unvalidated Redirects and Forwards
- Variables variable
- Cross Site Scripting
- Cross Site Scripting Inclusion
- SQL Injection
- Server Side Template Injection
- CPanel Hacking / Cracking / Phishing (Doc)
Online Access :: https://lab.novacomputertraining.org/
All vulnerabilities are designed for beginner levels.