Need a demo application having all top 10 api risks about api-security HOT 6 CLOSED

Feel free to suggest concrete new challenges via https://github.com/juice-shop/juice-shop/issues/new?assignees=&labels=challenge&template=challenge-idea.md&title=%5B%E2%AD%90%5D+, I'd be happy to have more API challenges in Juice Shop. We do cover quite a lot already, though.

from api-security.

Hi @janibashamd,
Consider checking these resources:

• What's Next For Developers - OWASP API Security Top 10 2019
• OWASP Vulnerable Web Applications Directory
• MindAPI "Practice" References

I would also like to suggest you to search crAPI issues and if required open a new issue suggesting documentation improvements. Maybe you'll even find the time to help crAPI team to do that ;)

Cheers,
Paulo A. Silva

from api-security.

https://github.com/OWASP/crAPI

from api-security.

Yes i have seen crAPI but faced issues in finding the solutions for some of those challenges. Even solution file has only some of them.

I have checked https://github.com/erev0s/VAmPI but it doesn't show which endpoint is part of which vulnerability.

If we can have demo application for next coming top 10 with good docs, challenges and solutions will be great for new users.

from api-security.

You can also check out c{api}tal which was created as a CTF for DEF CON.
*For the purpose of full disclosure, this project was created by my employer.

from api-security.

+1 here. I am also struggling to find a demo application with all API top 10 risks. We have seen all the above. Juiceshop is the best one we have been relying on. @bkimminich

from api-security.