secDevLabs

secDevLabs copied to clipboard

## This solution refers to which of the apps? [A1] Broken Access Control - Vulnerable Ecommerce API ## What did you do to mitigate the vulnerability? A JWT implementation was...

vitor-mauricio

[A1] - Broken Access Control - Camplake-API

1

## This solution refers to which of the apps? [A1] - Broken Access Control - Camplake-API ## What did you do to mitigate the vulnerability? Adding signature validation to incoming...

vitor-mauricio

Improvements

1

- [x] Add docker-compose down command in Makefile #562 - [x] Verify another way to prune containers from docker-compose to avoid excluding no related local containers. #563 - [ ]...

fguisso

comer até morrer

3

## This solution refers to which of the apps? A7 - Identity and Authentication Failures ## What did you do to mitigate the vulnerability? Using JWT for security autenticate ##...

InesCardinot

[A3] - Injection - Mongection

1

## This solution refers to which of the apps? A3 - Mongection ## What did you do to mitigate the vulnerability? I sanitized the user entries for the database with...

ragoso

[A7] - Identity and Authentication Failures - Python - Saidajaula Monster Fit - Solution

2

## This solution refers to which of the apps? [A7 - Identity and Authentication Failures - Python - Saidajaula Monster Fit](https://github.com/globocom/secDevLabs/tree/master/owasp-top10-2021-apps/a7/saidajaula-monster) ## What did you do to mitigate the vulnerability?...

henriporto

[A9] - Security Logging and Monitoring Failures - Solution

4

## This solution refers to which of the apps? [A9 - Security Logging and Monitoring Failures - Python - GamesIrados.com](https://github.com/globocom/secDevLabs/tree/master/owasp-top10-2021-apps/a9/games-irados) ## What did you do to mitigate the vulnerability? Implemented...

henriporto

[OWASP 2021] - Add new A2 - Cryptographic Failures

2

# New Vulnerable Application Created a new vulnerable application for the secDevLabs. The vulnerability in the application is based on the OWASP Top 10 2021 - A2 Cryptographic Failures. Examples...

chinchila

Add manual SQL Injection steps into A1 app

5

## Motivation [Copy-and-Paste](https://github.com/globocom/secDevLabs/tree/master/owasp-top10-2017-apps/a1/copy-n-paste)'s attack narrative makes use only of SQLMap to show how an automated SQL injection could be performed. ## It would be great if We could also have...

rafaveira3

## Motivation The way [Vulnerable WordPress Misconfig](https://github.com/globocom/secDevLabs/tree/master/owasp-top10-2017-apps/a6/misconfig-wordpress) is today, we are using the default template, which doesn't look so cool: ## It would be great if This app had a...

Krlier