appsecco / dvcsharp-api

Damn Vulnerable C# Application (API)

Damn Vulnerable C# Application (API Only)

Getting Started

Note: This is a deliberately vulnerable app, please do not host it on production or Internet/public facing servers. Use with caution.

Docker

docker-compose up

Manual

Install .NET Core 2.x SDK Microsoft .NET Core SDK

Install dependencies and migrate database:

dotnet restore
dotnet ef database update

Start application server:

dotnet run

Start application server with watcher for auto-reload on change:

dotnet watch run

Build Docker

• To build a docker image run the following command

docker build -t appsecco/dvcsharp .

• To run the docker container

docker run -d --name dvcsharp -it -p 5000:5000 appsecco/dvcsharp

Solution

The documentation-dvcsharp-book folder has instructions to use the app and exploit vulnerabilities that have been programmed.

dvcsharp-api's Issues

is there any relevant swagger file for this API ?

Vulnerabilities/API

Hello AppSecco, Team!

I am using this API to do some test with DAST scan.
I am trying test the API isoladely and until now, I found this security issues with DAST :

I´d like to know, Which are the vulnerabilities in this API, I think the DAST bringed few results and maybe I need adjust to capture more vulnerabilities.

Regards!

can't build appsecco/dvcsharp

Step 1/8 : FROM microsoft/dotnet
pull access denied for microsoft/dotnet, repository does not exist or may require 'docker login': denied: requested access to the resource is denied

Docs for vulnerabilities are missing

The java and node.js projects have docs showing how to exploit the vulnerabilities and how to fix them. But the C# one does not have. Or am I missing something here?

solutions

where can we see solutions for labs