## AspGoat 的默认用户名是 admin，默认密码是 admin123。 ## The default username for AspGoat is admin and the default password is admin123. AspGoat is an intentionally vulnerable ASP.NET Core application that helps Security Engineers and Developers analyze and mitigate common web application vulnerabilities. It includes the OWASP Top 10 and beyond, providing hands-on Application Security challenges. ## ✨ Features 🐞 Intentionally vulnerable ASP.NET Core MVC app 📚 Hands-on labs for: 🐞 Cross-Site Scripting (XSS) 🐞 Cross-Site Request Forgery (CSRF) 🐞 SQL Injection (SQLi) 🐞 XML External Entity (XXE) 🐞 Local File Inclusion (LFI) 🐞 Remote Code Execution (RCE) 🐞 Unrestricted File Upload 🐞 Information Disclosure 🐞 Broken Authentication 🐞 Server-Side Request Forgery (SSRF) 🐞 Insecure Direct Object Reference (IDOR) 🐞 Insecure Deserialization 🐞 Command Injection 🐞 Prototype Pollution 🛡️ Secure vs Insecure coding snippets 🐳 Ready-to-run Docker setup