DEV Community

Discussion on: Memory leak, redirect loop, deadlock, XSS, CSRF, XEE, ..., understanding bugs by using too buggy web application

Collapse
 
shostarsson profile image
Rémi Lavedrine

That is very interesting.
I am using a lot of on-purpose vulnerable app to try some tools on them.

Do you think of releasing it with only the vulnerability so that one does not have the "memory consumption" issue?

Collapse
 
ktamura profile image
Kohei Tamura • Edited

Thank you for your comment and sorry for my late reply. I didn't notice your comment.

Easybuggy has "only-vulnerabilities" mode which displays only vulnerability pages and does not cause memory consumption:

java -Deasybuggy.mode=only-vulnerabilities -jar easybuggy.jar

If you will use tools like OWASP ZAP, this mode is useful.

Collapse
 
shostarsson profile image
Rémi Lavedrine

Oh that is brilliant.

I'll test it soon. :-)