Dwfa
damn vulnerable frappe app
- Author: ankush
- Repository: https://github.com/ankush/dwfa
- GitHub stars: 5
- Forks: 2
- License: MIT
- Category: Other
- Maintenance: Unmaintained
- Frappe versions: develop
Install Dwfa
bench get-app https://github.com/ankush/dwfaAdd the Frappe Gems badge to your README
Maintain Dwfa? Paste this into your README:
[](https://frappegems.com/gems/apps/ankush/dwfa)About Dwfa
dwfa - Damn Vulnerable Frappe App.
This is an example Blog Post management app which contains hidden vulnerabilities.
Tips: - Read python and DB API documentation on surface to get some basic idea of how things work: - DB API - https://frappeframework.com/docs/user/en/api/database - Document API - https://frappeframework.com/docs/user/en/api/document - Frappe Framework basics: https://frappeframework.com/docs/user/en/basics and https://frappeframework.com/docs/user/en/basics/doctypes - There are many vulnerabilities in this code with varying level of complexity for exploits and domain knowledge requirements. - Technologies you should be familiar with: Python, JS, SQL(specifically MySQL flavour), Jinja2. - Read docs or better yet, read code if you want to truly understand how something works and how it can be abused. All our code is open source.
WARNING: This is an exercise for developing and evaluating code-auditing skills. DO NOT EVER INSTALL THIS APP ANYWHERE.
License
MIT
Related Other apps for Frappe & ERPNext
- Erpnext — Free and Open Source Enterprise Resource Planning (ERP)
- Helpdesk — Modern, Streamlined, Free and Open Source Customer Service Software
- Print Designer — Visual print designer for Frappe / ERPNext
- Ctr — CTR模型代码和学习笔记总结
- Whitelabel — Whitelabel ERPNext
- Fossunited — fossunited.org
- Helm — Helm Chart Repository for Frappe/ERPNext
- Frappe Attachments S3 — A frappe app to upload file attachments in doctypes to s3.