TESTING APPLICATION — for demonstrating F5 protections (WAF / Bot / DoS / JWT). Contains no real data.
F5
ALEF
ALEF Testing App

Testing web application

A typical web app with login, registration, a user list, a guestbook and search. Every page and API endpoint is a target for demonstrating what F5 detects and blocks in front of this server.

Directory

Login

Login form (POST). Seed accounts: admin, demo, password password.

API: POST /api/login

Register

Create a new user via a form.

API: POST /api/register

Users

List of users.

API: GET /api/users

Guestbook

Submit and list text entries.

API: GET/POST /api/guestbook

Search

Catalog search (reflects input — a useful target).

API: GET /api/search?q=

Dashboard

Application state, reset and unsafe-mode toggle.

API: GET /api/info