devopsshield/devsecops-pygoat repository overview

⁠Intentionally Unsecure PyGoat App for DevSecOps Learning

⁠Overview

The Intentionally Unsecure PyGoat is a deliberately vulnerable Python web application designed for educational purposes. It allows developers, security professionals, and DevSecOps enthusiasts to practice identifying and fixing security issues commonly found in web applications.

⁠Features

• Vulnerabilities: The app intentionally contains various security vulnerabilities, such as SQL injection, cross-site scripting (XSS), and insecure authentication.
• Challenges: Users can explore different security challenges and learn how to secure their applications.
• Documentation: Detailed instructions on setting up and using the app are provided below.

⁠Usage

1. Pull the Docker Image:

   docker pull devopsshield/devsecops-pygoat:tagname
   

   Copy

2. Run the Container:

   docker run -d -p 8000:8000 --name pygoat devopsshield/devsecops-pygoat:tagname
   

   Copy

3. Access the App: Open your web browser and navigate to http://localhost:8000⁠.

⁠Security Warnings

• Do Not Deploy in Production: This app is intentionally insecure and should never be used in production environments.
• Use in Isolated Environments: Run the container in an isolated environment (e.g., on your local machine or a dedicated VM) to avoid exposing vulnerabilities to the internet.

⁠Contributing

Contributions are welcome! If you find any issues or want to add new challenges, feel free to submit a pull request.

⁠License

This project is licensed under the MIT License. See the LICENSE⁠ file for details.

---

Disclaimer: The Intentionally Unsecure PyGoat is purely for educational purposes. Use it responsibly and only in controlled environments.