W0rm

PHP web application for cybersecurity education, utilizing the OpenStack cloud platform for constructing attack/target machines.

Objectives

• Building a security testing practice environment and providing knowledge about Information Security for students of Can Tho University.
• Implementing lectures and challenges on Information Security theory, attack and defense techniques in cyberspace.
• Integrating Cloud Computing technology to build attack VMs and target VMs for security testing exercises.

Key Components

OpenStack Cloud Computing Infrastructure manages attack and target VMs for security testing challenges deployed on the web application. The application consists of three parts:

• Classes will provide knowledge in the field of Information Security for students through lectures and documents.
• CTF challenges with topics such as Forensics, Web Exploitation, Reverse Engineering, Cryptography,...
• Security testing exercises will be practiced by students through the VNC Console on the application.

---

Requirements

• PHP >= 7.2.5
• ext-curl
• Composer

How to install

composer require php-opencloud/openstack

composer require vlucas/phpdotenv

Configuration

The .env file is essential for storing sensitive configuration details like API keys, database credentials, and other secrets. Here's how to create one: Create a new file named .env in your project root directory (the same directory as your composer.json file).

Inside the .env file, define your environment variables using the following syntax:

mysql_host=
mysql_username=
mysql_password=
mysql_database=
mysql_port=

stack_authUrl=
stack_region=
stack_userID=
stack_password=

stack_projectID=

stack_attackerID=
stack_targetID=

Important: Never commit your .env file to version control (e.g., Git). This is because it might contain sensitive information