Tiredful API: an intentionally broken Django REST API (library, exams, blog, trains, health, advertisements) with information disclosure, IDOR, access control, throttling, SQL injection and XSS scenarios, protected by OAuth bearer tokens.
Not startedDockercommit bdb0707x86_64 · aarch64Secret
Solve each Tiredful API scenario listed on its Scenarios page.
The brief for this lab lives in its repository.