This repository was archived by the owner on May 17, 2022. It is now read-only.

Commits

Commits on May 2, 2017

Commits on May 16, 2016

Added username enumeration vuln on login page
Seth Law
committed

Commits on May 3, 2016

fixed reset_password flow
Seth Law
committed

Commits on Mar 12, 2016

Merge pull request #50 from bones-codes/master
nafod
committed

Commits on Mar 11, 2016

user.id is back
cara marie
committed
fixed default (for real this time)
cara marie
committed

Commits on Mar 10, 2016

now including a default user image and the rest of the 'fixes'
cara marie
committed
csrfexempt --> csrf_exempt; removed change password ref since it requires the user pass (not csrf-able)
cara marie
committed
fixed image upload to show image and added username to profile edit (so xss works)
cara marie
committed
corrected registration -- users are now active
cara marie
committed

Commits on Feb 16, 2016

Merge pull request #48 from nVisium/dev
cktricky
committed

Commits on Feb 1, 2016

Fixed warnings relating to naive datetimes
nafod
committed

Commits on Jan 21, 2016

Fixed Broken Auth vuln to include blacklist problem instead of a whitelist
Cyrus Malekpour
committed
Updates to CSRF, IDOR, SQLi and Insecure Components tutorials
Cyrus Malekpour
committed
Merged from master
Cyrus Malekpour
committed

Commits on Dec 28, 2015

Create LICENSE.md
nVisium-seth-law
committed

Commits on Sep 23, 2015

Commits on Sep 21, 2015

Added forgot password functionality using os.urandom (#45)
nafod
committed

Commits on Sep 5, 2015

Print fix
Seth Law
committed

Commits on Aug 16, 2015

More code cleanup and tweaks
Cyrus Malekpour
committed

Commits on Aug 15, 2015

Merge branch 'master' of github.com:nVisium/django.nV
Cyrus Malekpour
committed
Ran a linter to remove whitespace
Cyrus Malekpour
committed
Merge pull request #43 from spookylukey/patch-1
nafod
committed

Commits on Aug 14, 2015

Fixed typo in README
spookylukey
committed
Added some text indicating the app is insecure in the app (#42)
Cyrus Malekpour
committed
Added insecurity warning to all files w/ code (#42)
Cyrus Malekpour
committed

Commits on Aug 11, 2015

Commits on Aug 10, 2015

Commits on Jul 14, 2015

Updated injection tutorial to include info about shell injection
Cyrus Malekpour
committed
Added shell injection to file uploads
Cyrus Malekpour
committed
Merge pull request #38 from nVisium/dev
nafod
committed