wordpress-vulnerable-lab/docker-compose.yml at main · ayinedjimi/wordpress-vulnerable-lab · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
################################################################################
# wordpress-vulnerable-lab — the most complete Docker WordPress vulnerable lab
# Author: Ayi NEDJIMI <ayinedjimi@users.noreply.github.com>
# Repo:   https://github.com/ayinedjimi/wordpress-vulnerable-lab
#
# DO NOT EXPOSE TO THE INTERNET. Isolated lab use only.
#
# Services & default ports:
#   WordPress     -> http://localhost:31338
#   phpMyAdmin    -> http://localhost:31339
#   MailHog UI    -> http://localhost:31340  (SMTP 31325)
#   Adminer       -> http://localhost:31341
#   Redis         -> localhost:31379 (exposed on purpose)
#   Memcached     -> localhost:31211 (exposed on purpose)
#   MySQL         -> localhost:31306 (exposed on purpose)
################################################################################

services:

  db:
    image: mysql:5.7
    container_name: wpvl-db
    restart: unless-stopped
    command: --default-authentication-plugin=mysql_native_password --bind-address=0.0.0.0 --skip-name-resolve
    environment:
      MYSQL_ROOT_PASSWORD: "root"
      MYSQL_DATABASE: "wordpress"
      MYSQL_USER: "wordpress"
      MYSQL_PASSWORD: "wordpress"
    ports:
      - "31306:3306"
    volumes:
      - db_data:/var/lib/mysql

  wordpress:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: wpvl-wordpress
    restart: unless-stopped
    depends_on:
      - db
      - redis
      - memcached
    ports:
      - "31338:80"
    environment:
      WORDPRESS_DB_HOST: "db:3306"
      WORDPRESS_DB_USER: "wordpress"
      WORDPRESS_DB_PASSWORD: "wordpress"
      WORDPRESS_DB_NAME: "wordpress"
      WORDPRESS_TABLE_PREFIX: "wp_"
      WORDPRESS_DEBUG: "1"
      WORDPRESS_CONFIG_EXTRA: |
        define('WP_DEBUG_LOG', true);
        define('WP_DEBUG_DISPLAY', true);
        define('DISALLOW_FILE_EDIT', false);
        define('FS_METHOD', 'direct');
        define('AUTOMATIC_UPDATER_DISABLED', true);
        define('WP_AUTO_UPDATE_CORE', false);
    volumes:
      - wp_data:/var/www/html

  phpmyadmin:
    image: phpmyadmin:5
    container_name: wpvl-pma
    restart: unless-stopped
    depends_on:
      - db
    ports:
      - "31339:80"
    environment:
      PMA_HOST: db
      PMA_USER: root
      PMA_PASSWORD: root
      UPLOAD_LIMIT: 256M

  mailhog:
    image: mailhog/mailhog:latest
    container_name: wpvl-mailhog
    restart: unless-stopped
    ports:
      - "31325:1025"
      - "31340:8025"

  adminer:
    image: adminer:latest
    container_name: wpvl-adminer
    restart: unless-stopped
    depends_on:
      - db
    ports:
      - "31341:8080"

  redis:
    image: redis:6
    container_name: wpvl-redis
    restart: unless-stopped
    # Intentionally exposed with no auth (misconfig sim).
    ports:
      - "31379:6379"

  memcached:
    image: memcached:1.6
    container_name: wpvl-memcached
    restart: unless-stopped
    # Intentionally exposed with no ACL (misconfig sim).
    ports:
      - "31211:11211"

volumes:
  db_data:
  wp_data: