Request Bin

This application is part of the "Input Sanitisation and XSS" practical. In particular, this application is used to capture HTTP requests, to demonstrate XSS attacks.

You should never run the application or the VM in any production environment.

Running the application

Requirements

You should download and install:

• Oracle VM VirtualBox
• Hashicorp Vagrant 1.8+

These are both free and open source software packages and run on Linux, OS X and Windows.

Run

Simply cd into the project directory and run:

vagrant up

The first time you run the machine it will take some time to download the base Linux image and to configure the VM (install and configure all dependencies).

You can access the web application at http://127.0.0.1:8070 (or replace 127.0.0.1 with your local/public IP).

You can SSH into the machine, after it has been started, using vagrant ssh. Please note that the project directory is mounted at /vagrant/ in the VM.

You can stop the machine using vagrant halt or destroy it completely with vagrant destroy.

Updating

To checkout the latest version of the project:

cd webapp/  # cd into the project's folder
vagrant destroy -f && git pull && vagrant up

Testing

The software has a few functional tests to verify that the application is working as expected. You can run these tests after setting up the VM by running:

vagrant ssh -c "cd /vagrant/ && vendor/bin/phpunit tests"