# Erlik 2 | Vulnerable-Flask-App

**URL:** <https://onehack.st/t/erlik-2-vulnerable-flask-app/224850>\
**Category:** Tools & Scripts\
**Tags:** tools, hacking, technology\
**Created:** [October 6, 2022, 10:12pm UTC](https://onehack.st/t/erlik-2-vulnerable-flask-app/224850 "2022-10-06T22:12:23Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Prometheus](https://onehack.st/user_avatar/onehack.st/prometheus/32/34950_2.png) [@Prometheus](https://onehack.st/u/Prometheus)\
**Post date:** [October 6, 2022, 10:12pm UTC](https://onehack.st/t/erlik-2-vulnerable-flask-app/224850/1 "2022-10-06T22:12:23Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/c/6/c65656103ecfa38cc2ed9790435d85a82c003130.jpeg)

# Vulnerable-Flask-App

Erlik 2 - Vulnerable-Flask-App

Tested - Kali 2022.1

## Description

It is a vulnerable Flask Web App. It is a lab environment created for people who want to improve themselves in the field of web penetration testing.

## Features

It contains the following vulnerabilities.

-HTML Injection

-XSS

-SSTI

-SQL Injection

-Information Disclosure

-Command Injection

-Brute Force

-Deserialization

-Broken Authentication

-DOS

-File Upload

## Installation

git clone [https://github.com/anil-yelken/Vulnerable-Flask-App](https://github.com/anil-yelken/Vulnerable-Flask-App)

cd Vulnerable-Flask-App

sudo pip3 install -r requirements.txt

## Usage

python3 vulnerable-flask-app.py

[![](https://github.com/anil-yelken/Vulnerable-Flask-App/raw/main/vulnerable-flask-app.jpg)](https://github.com/anil-yelken/Vulnerable-Flask-App/blob/main/vulnerable-flask-app.jpg)

## GitHub:

[https://github.com/anil-yelken/Vulnerable-Flask-App](https://github.com/anil-yelken/Vulnerable-Flask-App)

---

<div class="post-metadata">

**Author:** ![YounesWinter](https://onehack.st/user_avatar/onehack.st/youneswinter/32/86876_2.png) [@YounesWinter](https://onehack.st/u/YounesWinter)\
**Post date:** [October 7, 2022, 10:54am UTC](https://onehack.st/t/erlik-2-vulnerable-flask-app/224850/2 "2022-10-07T10:54:17Z")

</div>

Great share! simple web app full of vulns (bad coding) but the owner must give more instructions and infos to beginner, anyway thnx for sharing that