PoC BunkerWeb 1.6.17 : docker-compose sur Proxmox, déployé par Ansible
Stack BunkerWeb (scheduler, UI, MariaDB, Redis), sites de test (nginx, Juice Shop, go-httpbin), filtrage DOCKER-USER, script de tests, README et schéma d'architecture. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
This commit is contained in:
commit
099584c95c
42 files changed
+4260
No files matched your search
@@ -0,0 +1,26 @@
|
||||
<!doctype html>
|
||||
<html lang="fr">
|
||||
<head>
|
||||
<meta charset="utf-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||||
<title>PoC BunkerWeb - contact</title>
|
||||
<style>
|
||||
body { font-family: system-ui, sans-serif; max-width: 40rem; margin: 2rem auto; padding: 0 1rem; }
|
||||
label, input, textarea, button { display: block; width: 100%; margin-bottom: .8rem; }
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
<h1>Contact</h1>
|
||||
<p>Formulaire factice envoyé en GET : la vitrine est statique, c'est BunkerWeb qui
|
||||
inspecte les paramètres. Essayez un message contenant
|
||||
<code><script>alert(1)</script></code> ou <code>' OR 1=1 --</code>.</p>
|
||||
<form method="get" action="contact.html">
|
||||
<label for="nom">Nom</label>
|
||||
<input id="nom" name="nom">
|
||||
<label for="message">Message</label>
|
||||
<textarea id="message" name="message" rows="5"></textarea>
|
||||
<button type="submit">Envoyer</button>
|
||||
</form>
|
||||
<p><a href="index.html">Retour</a></p>
|
||||
</body>
|
||||
</html>
|
||||
Reference in new issue
Block a user