A vulnerable blogging API by the Checkmarx research team, built with FastAPI, React, PostgreSQL and Redis, with ten challenges mapped to the OWASP API Security Top 10, from broken object level authorization to injection. Each solved challenge returns a flag.
Not startedDockercommit 08cb336x86_64 · aarch64Secret
Solve the ten c{api}tal challenges and collect their flags.
The brief for this lab lives in its repository.