Milkshak3s/CSEC-380-G5

Issues

• Fix broken auth check for deleting videos

  #125 opened 5 years ago
  0

• Modify our backend to be vulnerable to SSRF

  #113 opened 5 years ago
  1

• Write a test that demonstrates our backend is vulnerable to SSRF

  #112 opened 5 years ago
  0

• Create a video of us exploiting the SSRF vulnerability

  #111 opened 5 years ago
  1

• Describe how we would fix our code so that this SSRF issue is no longer present

  #110 opened 5 years ago
  1

• Describe how our test demonstrates SSRF as opposed to just accessing an endpoint

  #109 opened 5 years ago
  1

• Describe the limitations of the SQL injection vulnerabilities we have

  #108 opened 5 years ago
  1

• Describe how we would fix our code to fix these issues

  #107 opened 5 years ago
  1

• Make a video demonstrating blind SQL injection against our site

  #106 opened 5 years ago
  1

• Make a video demonstrating classic SQL injection against our site

  #105 opened 5 years ago
  1

• Write a test that shows blind SQL Injection

  #104 opened 5 years ago
  1

• Write a test that shows classic SQL injection

  #103 opened 5 years ago
  1

• Modify our login (or something) to directly query the database with a prepared statement

  #102 opened 5 years ago
  1

• Project fails to docker-compose up

  #101 opened 5 years ago
  0

• Remove hashlib from backend/requirements.txt

  #97 opened 5 years ago
  0

• Hookup delete button functionality on frontend

  #95 opened 5 years ago
  1

• Add backend static file hosting

  #89 opened 5 years ago
  1

• Have frontend video list component pull from backend endpoint

  #88 opened 5 years ago
  1

• Frontend component for an upload prompt

  #86 opened 5 years ago
  1

• Frontend component for a video link prompt

  #85 opened 5 years ago
  1

• Backend endpoint for posting video files from a URL

  #84 opened 5 years ago
  1

• Backend function to processes a thumbnail from a video file

  #83 opened 5 years ago
  0

• Backend endpoint to get a video file and metadata by ID

  #82 opened 5 years ago
  1

• Backend endpoint to delete a video by ID

  #81 opened 5 years ago
  1

• Backend endpoint to get metadata for ALL videos

  #80 opened 5 years ago
  1

• Test case for user authenticating, uploading video, viewing video, then deleting video

  #79 opened 5 years ago
  0

• Describe how we prevent XSS when displaying the username of the user who uploaded the video

  #78 opened 5 years ago
  1

• Describe how we prevent users from deleting videos that they don't own

  #77 opened 5 years ago
  1

• Frontend component to display uploaded videos

  #76 opened 5 years ago
  1

• Frontend component to display and play a single video

  #75 opened 5 years ago
  1

• Backend endpoint to handle file upload

  #74 opened 5 years ago
  1

• SQLA model for a single video

  #73 opened 5 years ago
  1

• Implement password hashing on the backend auth check

  #69 opened 5 years ago
  1

• Add a bad eval() or similar to backend to enable RCE

  #67 opened 5 years ago
  0

• Record video demonstrating RCE execution

  #66 opened 5 years ago
  1

• Describe how we would fix this vulnerability in our code

  #65 opened 5 years ago
  1

• Add react frontend server to docker-compose

  #61 opened 5 years ago
  1

• Add backend server to docker-compose

  #60 opened 5 years ago
  1

• Have frontend login component send POST request with login data when button pressed

  #59 opened 5 years ago
  1

• Have frontend login component check for a valid token and redirect if so

  #58 opened 5 years ago
  1

• Test case that logs into into web app succesfully

  #57 opened 5 years ago
  1

• Test case that logs into web app with incorrect pass but correct user

  #56 opened 5 years ago
  1

• Test case that logs into web app with incorrect user but correct pass

  #55 opened 5 years ago
  1

• Add MySQL to docker-compose

  #54 opened 5 years ago
  1

• Create database setup script with basic user data

  #53 opened 5 years ago
  1

• Create basic login frontend component in react

  #52 opened 5 years ago
  1

• Create backend API endpoint to validate auth and provide token

  #51 opened 5 years ago
  1

• Create backend API endpoint to get user data based on auth token

  #50 opened 5 years ago
  1

• Create sqlalchemy (or whatever language) database model

  #49 opened 5 years ago
  1

• Link to the test cases used in this project

  #48 opened 5 years ago
  1