Skip to content

Latest commit

 

History

History
33 lines (23 loc) · 733 Bytes

File metadata and controls

33 lines (23 loc) · 733 Bytes

Remediation Demo

A flask app with SQL injection and leaked passwords to be used for remediation demo.

SQL injection

curl "http://127.0.0.1:5000/users?name='%20OR%20'1'='1"

Leaking passwords

curl http://127.0.0.1:5000/.env
wget http://127.0.0.1:5000/.env

Local Setup

nightvision app create remediation-demo
nightvision target create remediation-demo http://127.0.0.1:5000 --type api
nightvision swagger extract ./ -t remediation-demo --lang python 
pip install -r requirements.txt
python app.py
nightvision scan remediation-demo -a remediation-demo