LazyWeb is a demonstrative Web application used to expose common server-side application vulnerabilities. The application provides a comprehensive learning experience for developers and security enthusiasts by classifying each vulnerability and labeling its difficulty level. ###Main characteristics - Demonstrate real-world vulnerabilities in Web applications. - Covering security flaws from basic to advanced, allowing users to test their skills at different levels. - Designed to help security professionals understand the nature of vulnerabilities and how to mitigate the impact of these vulnerabilities. ###Contains vulnerabilities The application includes the following vulnerabilities: - Operating system command injection - SQL injection - XML External Entity Injection (XXE) - Unsafe Direct Object References (IDOR) - Local File Inclusion (LFI) - Unsecure file uploads - arbitrary session allocation - Authorized sabotage - Certification breach - .git folder leaked (if cloned directly to the Web root directory)
