Skip to content

dogkansaracedu/OWASP-API-1_IDOR_Demo

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

37 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

OWASP-API-1_IDOR_Demo

How to run: python -m flask run or docker run -t IMAGE

DB Design: User collection and message collection

Vulnerable methods: Get message Add message

Protection 1: Unpredictable ID's

Protection 2: Check Authorization

Code Analysis:

  1. Bandit
  2. PYT
  3. RATS
  4. Prospector
  5. ChatGPT

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published