piypil / lun903 Goto Github PK

There are many different insecure applications. We need to build one docker out of them.

dvpwa
WebGoat
juice-shop
mutillidae
DVWA

Add the ability to scan with git

1. Get to know ZAP. Take a training course. URL
2. Pick up Mutillidae II or WebGoat
3. Provide a minimal free-form report on vulnerabilities in these applications and attach this issue

Разработать план внедрения CodeQL

Need to think about models in django project for backend-side.
To issue we need create django models in code and maybe design database logic diagram.
Link:

1. https://habr.com/ru/post/514364/
2. https://django.fun/ru/docs/django/4.1/topics/db/models/

Add a display of the last 3 uploaded projects per scan (WelcomePage.tsx)

Create a basic Django cascade. With an initial loading page.

print - replace with competent logging

Add the ability to manage the vulnerability

dependency check - add scan results to Postgres

Global variables (progress_queue, progress) in views are best avoided (need to change code, delete). We need to change the process of displaying downloads completely.

Need to review Commercial projects and grow their idea of creating a loading page. Provide everything in a minimal report and attach it to the issue

I'm attaching the link - click. You'll find a lot of projects there. Choose the ones you think are the most interesting.

Tracking issue for:

• https://github.com/piypil/LUN903/security/code-scanning/1

Need to verify

implement authentication based on TON Connect

Think about dockers' security. Retrieved from.To issue make notes.

Change display ->

• 1. Use docker ZAP
• 2. Take results from docker ZAP and save to Postgres
• 3. Display results via Backend Django (API)

• - Set up the database. PostgreSQL
• - Make a function that will receive a package (ZIP) from the frontend. And send it for scanning (bandit). The ZIP archive must be placed in the database.
• - Get information and enter it into the database from bandit. Use bandit application for testing
• - All this information on scanning should be transferred to the frontend.
• - If there will be time in kamille, add SAST Open surce for Java and GO

Bandit script should be placed only in kamille.

• Make 2 scanning options, fast and full scanning
• Advanced settings -> ability to pass authentication parameters

Develop options for the implementation of samrt contract analysis on TON

change

Thinking about using Redis in Django