What's wrong with this Code? Vulnerable Python Code - Walkthrough and Fix
On December 29, I posted a vulnerable Python Code Snippet. This code snippet was for an API that was vulnerable in several ways. I explore the vulnerability and fix the Python API to be much more secure. Vulnerabilities that we'll explore includes Mass Assignment (Authorization bypass) and Insecure Password Storage. These vulnerabilities are pretty bad. This can cause Privilege Escalation and Account Takeover.
This is the last AppSecEngineer Video for 2021. Have a great 2022. Wish you a very Happy New Year!
#APIsecurity #PythonCode #AppSecEngineer