Mass Assignment - Python AppSec (by Duo Sec) - Veracode Security Labs Community Edition (free)
Video walkthrough for part 1 (Mass Assignment) of the "Python AppSec (by Duo Security)" topic in Veracode Security Labs Community Edition (free) - Hope you enjoy 🙂
↢Social Media↣
Twitter: / _cryptocat
GitHub: https://github.com/Crypto-Cat
HackTheBox: https://app.hackthebox.eu/profile/11897
LinkedIn: / cryptocat
Reddit: / _cryptocat23
YouTube: / cryptocat23
Twitch: / cryptocat23
↢Resources↣
https://www.veracode.com/events/hacke...
https://securitylabs-ce.veracode.com/
https://snyk.io/blog/python-security-...
https://arstechnica.com/information-t...
https://snyk.io/vuln/rubygems:activer...
↢Chapters↣
Start - 0:00
A Brief History of Data Modelling - 1:00
Hacking GitHub - 2:13
The Application & Adding Users - 5:47
User Editing and Exploiting - 8:12
Potential Solutions - 11:18
Protecting Data with Orator Models - 15:40