owasp-blt / blt Goto Github PK
View Code? Open in Web Editor NEWOWASP BLT is a bug logging tool to report issues and get points, organizations are held accountable.
Home Page: https://blt.owasp.org
License: GNU Affero General Public License v3.0
OWASP BLT is a bug logging tool to report issues and get points, organizations are held accountable.
Home Page: https://blt.owasp.org
License: GNU Affero General Public License v3.0
View details in Rollbar: https://rollbar.com/bugheist/Bugheist/items/26/
Traceback (most recent call last):
File "/app/.heroku/python/lib/python2.7/site-packages/django/core/handlers/base.py", line 147, in get_response
response = wrapped_callback(request, *callback_args, **callback_kwargs)
File "/app/.heroku/python/lib/python2.7/site-packages/django/contrib/auth/decorators.py", line 23, in _wrapped_view
return view_func(request, *args, **kwargs)
File "/app/.heroku/python/lib/python2.7/site-packages/django/views/generic/base.py", line 68, in view
return self.dispatch(request, *args, **kwargs)
File "/app/.heroku/python/lib/python2.7/site-packages/django/views/generic/base.py", line 88, in dispatch
return handler(request, *args, **kwargs)
File "/app/.heroku/python/lib/python2.7/site-packages/django/views/generic/edit.py", line 256, in post
return super(BaseCreateView, self).post(request, *args, **kwargs)
File "/app/.heroku/python/lib/python2.7/site-packages/django/views/generic/edit.py", line 222, in post
return self.form_valid(form)
File "/app/website/views.py", line 74, in form_valid
obj.save()
File "/app/.heroku/python/lib/python2.7/site-packages/django/db/models/base.py", line 700, in save
force_update=force_update, update_fields=update_fields)
File "/app/.heroku/python/lib/python2.7/site-packages/django/db/models/base.py", line 737, in save_base
update_fields=update_fields, raw=raw, using=using)
File "/app/.heroku/python/lib/python2.7/site-packages/django/dispatch/dispatcher.py", line 192, in send
response = receiver(signal=self, sender=sender, **named)
File "/app/website/models.py", line 143, in post_to_twitter
file = default_storage.open(instance.screenshot.file.name, 'rb')
File "/app/.heroku/python/lib/python2.7/site-packages/django/db/models/fields/files.py", line 49, in _get_file
self._require_file()
File "/app/.heroku/python/lib/python2.7/site-packages/django/db/models/fields/files.py", line 46, in _require_file
raise ValueError("The '%s' attribute has no file associated with it." % self.field.name)
ValueError: The 'screenshot' attribute has no file associated with it.
I can add "Sponsored Bug Hunts" before purchase any plan.
Actually I see many issues along of this process, I am not sure even if I can add Sponsored Bug Hunts and removed the already exiting Sponsors. The steps below will describe some of those functional and UX issues.
1- Click on "Start Hunting".
2- You will be navigated to the start bug hunting page "http://www.bugheist.com/start/"
3- Nothing there says that you are adding new "Sponsors".
4- Add URL and Image (it says squared image 1:1 with it's not squared on the homepage actually).
5- Click on "Start" from the bottom of the page (the blue one), or on "start" from any of the mentioned plans.
6- You will be navigated to PayPal login page! nothing told the user that you will navigated to the PP or checkout page, that's really weird UX.
7- On PP login page, I see the name of the merchant "CoderBountry" I am not sure if that intended.
8- Now, if you back to the homepage, you will see your added URLs and logos dispalyed under the "Sponsored Bug Hunts" and the old ones have been removed, it seems it shows only 5 sponsors.
9- The user will be surprised, how those have been added!
10- We need to add more clear path, and more communication messages for this path.
11- Also, the user is able to add the same Sponsor more than one, and cannot edit the already existing ones.
View details in Rollbar: https://rollbar.com/bugheist/Bugheist/items/25/
Traceback (most recent call last):
File "/app/.heroku/python/lib/python2.7/site-packages/django/core/handlers/base.py", line 147, in get_response
response = wrapped_callback(request, *callback_args, **callback_kwargs)
File "/app/.heroku/python/lib/python2.7/site-packages/django/contrib/auth/decorators.py", line 23, in _wrapped_view
return view_func(request, *args, **kwargs)
File "/app/.heroku/python/lib/python2.7/site-packages/django/views/generic/base.py", line 68, in view
return self.dispatch(request, *args, **kwargs)
File "/app/.heroku/python/lib/python2.7/site-packages/django/views/generic/base.py", line 88, in dispatch
return handler(request, *args, **kwargs)
File "/app/.heroku/python/lib/python2.7/site-packages/django/views/generic/edit.py", line 256, in post
return super(BaseCreateView, self).post(request, *args, **kwargs)
File "/app/.heroku/python/lib/python2.7/site-packages/django/views/generic/edit.py", line 221, in post
if form.is_valid():
File "/app/.heroku/python/lib/python2.7/site-packages/django/forms/forms.py", line 161, in is_valid
return self.is_bound and not self.errors
File "/app/.heroku/python/lib/python2.7/site-packages/django/forms/forms.py", line 153, in errors
self.full_clean()
File "/app/.heroku/python/lib/python2.7/site-packages/django/forms/forms.py", line 364, in full_clean
self._post_clean()
File "/app/.heroku/python/lib/python2.7/site-packages/django/forms/models.py", line 396, in _post_clean
self.instance.full_clean(exclude=exclude, validate_unique=False)
File "/app/.heroku/python/lib/python2.7/site-packages/django/db/models/base.py", line 1114, in full_clean
self.clean_fields(exclude=exclude)
File "/app/.heroku/python/lib/python2.7/site-packages/django/db/models/base.py", line 1156, in clean_fields
setattr(self, f.attname, f.clean(raw_value, self))
File "/app/.heroku/python/lib/python2.7/site-packages/django/db/models/fields/__init__.py", line 600, in clean
self.run_validators(value)
File "/app/.heroku/python/lib/python2.7/site-packages/django/db/models/fields/__init__.py", line 552, in run_validators
v(value)
File "/app/website/models.py", line 57, in validate_image
filesize = fieldfile_obj.file.size
File "/app/.heroku/python/lib/python2.7/site-packages/django/db/models/fields/files.py", line 51, in _get_file
self._file = self.storage.open(self.name, 'rb')
File "/app/.heroku/python/lib/python2.7/site-packages/django/core/files/storage.py", line 37, in open
return self._open(name, mode)
File "/app/.heroku/python/lib/python2.7/site-packages/storages/backends/s3boto.py", line 386, in _open
raise IOError('File does not exist: %s' % name)
IOError: File does not exist: filled
I can search for domain without entering anything in the domain field and get +1 point, and that will show 500 error for a while.
add links to stats in footer
Show a company leaderboard and display closed, open, email_event, date_modified
Have ability for website to "acknowledge" that a bug was reported... show the time it took and avg acknowledgement time
allow them to get notifications of new bugs from specific companies or all companies
use javascript email script to avoid scraping
View details in Rollbar: https://rollbar.com/bugheist/Bugheist/items/24/
Traceback (most recent call last):
File "/app/.heroku/python/lib/python2.7/site-packages/django/core/handlers/base.py", line 147, in get_response
response = wrapped_callback(request, *callback_args, **callback_kwargs)
File "/app/.heroku/python/lib/python2.7/site-packages/django/contrib/auth/decorators.py", line 23, in _wrapped_view
return view_func(request, *args, **kwargs)
File "/app/.heroku/python/lib/python2.7/site-packages/django/views/generic/base.py", line 68, in view
return self.dispatch(request, *args, **kwargs)
File "/app/.heroku/python/lib/python2.7/site-packages/django/views/generic/base.py", line 88, in dispatch
return handler(request, *args, **kwargs)
File "/app/.heroku/python/lib/python2.7/site-packages/django/views/generic/edit.py", line 256, in post
return super(BaseCreateView, self).post(request, *args, **kwargs)
File "/app/.heroku/python/lib/python2.7/site-packages/django/views/generic/edit.py", line 222, in post
return self.form_valid(form)
File "/app/website/views.py", line 75, in form_valid
obj.save()
File "/app/.heroku/python/lib/python2.7/site-packages/django/db/models/base.py", line 700, in save
force_update=force_update, update_fields=update_fields)
File "/app/.heroku/python/lib/python2.7/site-packages/django/db/models/base.py", line 737, in save_base
update_fields=update_fields, raw=raw, using=using)
File "/app/.heroku/python/lib/python2.7/site-packages/django/dispatch/dispatcher.py", line 192, in send
response = receiver(signal=self, sender=sender, **named)
File "/app/website/models.py", line 138, in post_to_twitter
media_ids = api.media_upload(filename=instance.screenshot.file.name, file=file)
File "/app/.heroku/python/lib/python2.7/site-packages/tweepy/api.py", line 201, in media_upload
headers, post_data = API._pack_image(filename, 3072, form_field='media', f=f)
File "/app/.heroku/python/lib/python2.7/site-packages/tweepy/api.py", line 1313, in _pack_image
raise TweepError('File is too big, must be less than %skb.' % max_size)
TweepError: File is too big, must be less than 3072kb.
The web app send request to the server and refresh the whole page when the user click on the Bug while the required fields are empty.
That should not happen actually, we should not call the server and send request for nothing, this validation should be done on the frontend first, and then send the request in case all the required fields are already filled.
This issue is applicable on both modules "Enter Bug" and "Start Hunting/be sponsored".
spider the website
find email addresses automatically
email them
encrypted code, contains email
show tweet count
show date last tweet sent
Add to the bottom of the page.
Invite two friends and get 1 point.
Email says username invites you to www.bugheist.com
Hold the 2 emails in a table and show the status on the iser profile page.
When the emails both return delivered then issue the point and delete them from the table.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.