Problematic project

Contains bad Python code with weak configuration settings, a sub-standard Dockerfile and vulnerable dependencies for demo purposes.

Don't run this thing in production. 🙄

Based on the vulnerable Python webapp Vulpy created by F. Portantier.

Name		Name	Last commit message	Last commit date
Latest commit History 14 Commits
.github/workflows		.github/workflows
payloads		payloads
static		static
templates		templates
.gitignore		.gitignore
Dockerfile		Dockerfile
Dockerfile-improved		Dockerfile-improved
LICENSE		LICENSE
Pipfile		Pipfile
Pipfile.lock		Pipfile.lock
README.md		README.md
api_list.py		api_list.py
api_post.py		api_post.py
brute.py		brute.py
csp.txt		csp.txt
db.py		db.py
db_init.py		db_init.py
libapi.py		libapi.py
libmfa.py		libmfa.py
libposts.py		libposts.py
libsession.py		libsession.py
libuser.py		libuser.py
mod_api.py		mod_api.py
mod_csp.py		mod_csp.py
mod_hello.py		mod_hello.py
mod_mfa.py		mod_mfa.py
mod_posts.py		mod_posts.py
mod_user.py		mod_user.py
requirements.txt		requirements.txt
trivy-results-better-high-critical.json		trivy-results-better-high-critical.json
trivy-results-better.json		trivy-results-better.json
trivy-results-high-critical.json		trivy-results-high-critical.json
trivy-results.json		trivy-results.json
vulpy-ssl.py		vulpy-ssl.py
vulpy.py		vulpy.py

Provide feedback