ColdBox Security Lab

GitHub

ColdBox Penetration
Testing Lab

Exploring common web application vulnerabilities, understanding their impact and learning secure implementation techniques.

View Source Code

About the Project

ColdBox Penetration Testing Lab is a web application security project developed using the ColdBox framework. It demonstrates common security vulnerabilities through controlled examples and compares vulnerable implementations with secure alternatives.

Security Areas Explored

01. SQL Injection

Demonstrates authentication bypass through unsafe SQL queries and explores parameterized queries as a mitigation.

02. Cross-Site Scripting

Explores reflected XSS through untrusted user input and demonstrates HTML output encoding.

03. Session Fixation

Demonstrates session ID handling and the use of session rotation after authentication.

Technologies Used

ColdBox CFML Lucee MariaDB CommandBox HTML CSS Bootstrap

Security Notice

This project contains intentionally vulnerable examples for educational purposes. The actual vulnerability demonstrations are kept in a controlled local environment and are not provided through this public showcase.

Explore the Project

View the source code, implementation and project documentation on GitHub.


Visit GitHub Repository