giadagabriele/cod-project

Cyber Offense and Defense Project - Università della Calabria

COD-project

Cyber Offense and Defense Project - Università della Calabria

Chosen challenges from PortSwigger:

Client-side - CSRF where token validation depends on request method
Server-side - Blind OS command injection with output redirection
Expert - Exploiting XXE to retrieve data by repurposing a local DTD

Used in scripts:

https://github.com/Textualize/rich	https://github.com/SBoudrias/Inquirer.js	https://github.com/tiangolo/typer

Used in backend:

https://github.com/pallets/flask

To run Flask (in terminal)

1. export FLASK_APP=backend.py    
2. export FLASK_ENV=development
3. flask run

You can find a brief explanation of our work here