OWASP-API-1_IDOR_Demo

How to run: python -m flask run or docker run -t IMAGE

DB Design: User collection and message collection

Vulnerable methods: Get message Add message

Protection 1: Unpredictable ID's

Protection 2: Check Authorization

Code Analysis:

1. Bandit
2. PYT
3. RATS
4. Prospector
5. ChatGPT