Skip to content

Pull requests: OWASP-CTF/VulnerableApp

New pull request New
183 Open 55 Closed
183 Open 55 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Harden VulnerableApp challenge endpoints (CTF remediation batch)
#238 opened Aug 14, 2026 by latinengineer Loading…
2 tasks
Fix blind SQL injection level 2
#237 opened Aug 11, 2026 by r1kka6 Loading…
Fix error SQL injection level 4
#236 opened Aug 10, 2026 by r1kka6 Loading…
Fix error SQL injection level 3
#235 opened Aug 10, 2026 by r1kka6 Loading…
Fix blind SQL injection level 1
#234 opened Aug 10, 2026 by r1kka6 Loading…
Fix error SQL injection level 2
#233 opened Aug 10, 2026 by r1kka6 Loading…
Fix error SQL injection level 1
#232 opened Aug 10, 2026 by r1kka6 Loading…
fix: isolate cache poisoning level 1 banners
#231 opened Aug 10, 2026 by tobymoreno Loading…
Ignore IDOR level 4 encoded role cookie
#230 opened Aug 10, 2026 by r1kka6 Loading…
Ignore IDOR level 3 role cookie
#229 opened Aug 10, 2026 by r1kka6 Loading…
Bind IDOR level 2 profile lookup to token owner
#228 opened Aug 10, 2026 by r1kka6 Loading…
Enforce IDOR level 1 profile ownership
#227 opened Aug 10, 2026 by r1kka6 Loading…
Remove authentication level 1 SQL injection
#226 opened Aug 10, 2026 by r1kka6 Loading…
Restrict path traversal level 1 file access
#225 opened Aug 10, 2026 by r1kka6 Loading…
Validate command injection level 1 IP input
#224 opened Aug 10, 2026 by r1kka6 Loading…
Escape reflected XSS image src input at level 1
#223 opened Aug 10, 2026 by r1kka6 Loading…
Escape reflected XSS HTML tag input at level 1
#222 opened Aug 10, 2026 by r1kka6 Loading…
Fix LDAP injection level 1 filter escaping
#221 opened Aug 10, 2026 by r1kka6 Loading…
Fix clickjacking level 1 framing protection
#220 opened Aug 9, 2026 by r1kka6 Loading…
Fix open redirect level 1 allowlist validation
#219 opened Aug 9, 2026 by r1kka6 Loading…
fix: parameterize blind SQL injection level 2
#216 opened Aug 9, 2026 by tobymoreno Loading…
1
fix: parameterize blind SQL injection level 1
#215 opened Aug 9, 2026 by tobymoreno Loading…
1
Harden CryptographicFailures verification against guessing
#214 opened Aug 9, 2026 by overscr Loading…
1
Fix VulnerableApp vulnerabilities (remediation)
#213 opened Aug 9, 2026 by attalla1 Loading…
1
fix: enforce authoritative roles in IDOR level 4
#212 opened Aug 9, 2026 by tobymoreno Loading…
1
ProTip! Filter pull requests by the default branch with base:dc34-ctf.