Erlik is a vulnerable SOAP web service. It is a lab environment created for people who want to improve themselves in the field of web penetration testing.
Features
It contains the following vulnerabilities.
-LFI
-SQL Injection
-Informaion Disclosure
-Command Inejction
-Brute Force
-Deserialization
Installation
git clone https://github.com/anil-yelken/Vulnerable-Soap-Service
cd Vulnerable-Soap-Service
sudo pip3 install requirements.txt
Usage
sudo python3 vulnerable_soap.py
Exploiting Vulnerabilities
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhOUGYj8Xwi_ByH99_MdsVRykhCBTyolp4ZVYDDmUmFhj5hK9fjyoaWlpR5rIaOcNhYW-aC-qsJA-D0rl-U7QFEma0q1rZpB7fe9Hdxh-17iUAGAbe2uJlSYz6fbcftH2bCww6M2jJTvjNdaop0mEJx7kImVr50yVAtwJAvo7Kv2SinVXrI9OZkbQFM/s901/11.jpg)
SQL Injection
Code:https://github.com/anil-yelken/Vulnerable-Soap-Service/blob/main/sqli.py
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZfA5jTAiUo_VC5T3UL_e26bL4dsM14LfbTYa6Iw8WnXNAxQWyKXAWZxM33YhnlrZNPfETqQyX1nF0TQQ6dorK7L9oK5Ox5_t3G_8lswcWd1DDhZFOPAP2-goqnX9QbMks7rWnG4lnVDOnKlhYMmR3RpmBt7CFmu6uwpbsoHgc6ZTnYKtxBMi7qUdW/s1145/12.jpg)