GitHub - greggles/vulnerable: A vulnerable module for Drupal showing a variety of ways to make insecure coding mistakes.

greggles / vulnerable Public

Notifications You must be signed in to change notification settings
Fork 8
Star 12

A vulnerable module for Drupal showing a variety of ways to make insecure coding mistakes.

www.crackingdrupal.com

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 21 Commits
README.txt		README.txt
vulnerable.info		vulnerable.info
vulnerable.install		vulnerable.install
vulnerable.module		vulnerable.module

Repository files navigation

The vulnerable.module was originally written to accompany the book https://www.crackingdrupal.com It provides examples of insecure code that people can learn from:

* Learn to exploit the weaknesses
* Modify the code to remove the vulnerability

The code for this module is in 6.x-1.x and 7.x-1.x branches as is the standard on Drupal.org.

This module is for educational purposes only. "Fixes" welcome as pull requests on github.

Praise is welcome via tweets [@greggles](https://twitter.com/greggles) or blog posts, especially that link to 
[Cracking Drupal](https://www.crackingdrupal.com/).

Bug reports and criticism is particularly welcome as issues or pull requests on Github.

Thanks for trying it out!