Vuln-API-App

Vuln-API-app is vulnerable python web application written in flask, bootstrap, HTML, CSS and JavaScript which is inspired from the web APIs that I've found to be vulnerable amomng several Organizations exposing data of thousands of users!

Deploy and HACK

Manual Method

• Install Python and git

• Clone Repository

  git clone --depth=1 https://github.com/dmdhrumilmistry/Vulnerable-API-App

• Change to application directory

  cd Vulnerable-API-App

• Install Requirements

  python -m pip install -r requirements.txt

• Start application

  # Using python
  python wsgi.py
  
  # Using gunicorn (works only on linux distros)
  gunicorn --bind 0.0.0.0:5000 wsgi:app
  
  # Run in debug mode
  python app.py
  

Hack On TryHackMe

• Visit Room
• Room WriteUp

ToDo

• Create Docker Stable Container