Go/Golang Developer
Budget: $250 – $750 USD
Now we are going to develop an intentionally vulnerable web application (Go/Golang) to be used for teaching developers about secure coding through examples.
The app has resembled an e-commerce website but it is not meant to be used by actual customers but rather for training developers in cybersecurity, so it's a 'dummy' app.
This is important because, although we don't need the app to look real/nice, we don't actually require all the functionalities to work as a full real app, nor we require test-cases for the code that is written
The application should be affected by the following vulnerabilities:
- Cross-Site Scripting
- SQL Injection
- XML Entity Expansion
- Authentication Bypass
- Authorization Bypass (horizontal)
- Path Traversal
- Cross-Site Request Forgery
- Sensitive Information Disclosure
The app has resembled an e-commerce website but it is not meant to be used by actual customers but rather for training developers in cybersecurity, so it's a 'dummy' app.
This is important because, although we don't need the app to look real/nice, we don't actually require all the functionalities to work as a full real app, nor we require test-cases for the code that is written
The application should be affected by the following vulnerabilities:
- Cross-Site Scripting
- SQL Injection
- XML Entity Expansion
- Authentication Bypass
- Authorization Bypass (horizontal)
- Path Traversal
- Cross-Site Request Forgery
- Sensitive Information Disclosure