samsapti / devops_minitwit Goto Github PK

To clean up the repository, move all the files belonging to the original version of the application into their own folder.

Pen testing

• We tried SQL injection, but with no luck, seems like you got everything set up nicely in gorm
• You seem to have up to date packages, so finding new exploits is difficult
• We targeted your URL https://minitwit.thesvindler.net with Zaproxy, see results below

Overall niceness and good luck!

The provided link in repositories.py (https://minitwit.thesvindler.net/) returns a 404:

We've left the below checklist unchecked because of this. If you can notify us when this is fixed, we will try again!

Checklist

• Do you see a public timeline?
• Does the public timeline show messages that the application received from the simulator?
• Can you create a new user?
• Can you login as a new user?
• Can you write a message?
• After publishing a message, does it appear on you private timeline?
• Can you follow another user?

• #39
• #40
• #41
• #30
• #34
• #44
• #35
• #36
• #37