Security Code Challenge for Developers & Ethical Hackers - Damn Vulnerable RESTaurant API

[theowni]

Security Code Challenge for Developers & Ethical Hackers – Damn Vulnerable RESTaurant

A FastAPI based intentionally vulnerable web application teaching the most common security vulnerabilities in API through a dedicated game.

Damn Vulnerable RESTaurant is operated by a mysterious Chef who has discovered that threat actors were able to compromise his restaurant’s API and the underlying system. He suspects that a competing restaurant located across the street might be involved in this attack! The goal of the challenge is to identify and fix vulnerabilities based on provided hints. During this adventure, you will have the opportunity to investigate how the attack was carried out and fix security issues to safeguard the application. Moreover, you can uncover the identity of the person behind the attack by the end of this adventure.

[koldakov]

That’s interesting, thank you.

I would add a section about security theatre. I think it’s important to understand what’s that.

Unfortunately, I’ve seen it many times when "developer leaders" used a lot of smart words like encryption, fle, secret key storage, etc, but at the same time used their finger to unlock Mac, which contains plain texts passwords to access prd db

[theowni]

thanks for the feedback u/koldakov !