jiridj/deliver-api repository overview

A DELIberately Vulnerable E-commeRce API. The DELIVER API is a sample API application with deliberate API vulnerabilities. It was created with the intent to provide a somewhat realistic demo scenario to illustrate how API vulnerabilities can be exploited. The DELIVER project includes following assets, each available in its own GitHub repository:

• DELIVER API⁠: An e-Commerce store backend as an API implemented with Express and MongoDB.
• DELIVER WEB⁠: A simple e-Commerce web application implemented as a VueJS-based single-page app.
• DELIVER ATTACKS⁠: A set of NodeJS-based examples of how an attacker could exploit the API's vulnerabilities.