Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add a way to demonstrate insufficient logging and monitoring vulnerabilities in crAPI #123

Open
JBAhire opened this issue Oct 4, 2022 · 2 comments
Open

Add a way to demonstrate insufficient logging and monitoring vulnerabilities in crAPI #123

JBAhire opened this issue Oct 4, 2022 · 2 comments
Labels
enhancement New feature or request hacktoberfest

Comments

@JBAhire
Copy link
Collaborator

JBAhire commented Oct 4, 2022

Is your feature request related to a problem? Please describe.
crAPI doesn't have the capability to demo insufficient logging and monitoring vulnerability which is OWASP API 10:2019.

Describe the solution you'd like
API10:2019 Insufficient Logging & Monitoring includes two CWEs:

We want to add the capability to demonstrate both of them.

Describe alternatives if any you've considered
NA

Additional context
NA
@JBAhire JBAhire added enhancement New feature or request hacktoberfest labels Oct 4, 2022
@drraghavendra
Copy link

drraghavendra commented Oct 8, 2022 •
edited
Loading

These Links will help you
https://crashtest-security.com/insufficient-logging-monitoring-guide/
https://teamtreehouse.com/library/owasp-top-10-vulnerabilities/insufficient-logging-and-monitoring

drraghavendra added a commit to drraghavendra/crAPI that referenced this issue Oct 9, 2022
@drraghavendra
Add files via upload
369f2a4 
Add a way to demonstrate insufficient logging and monitoring vulnerabilities in crAPI OWASP#123
@drraghavendra drraghavendra mentioned this issue Oct 9, 2022
Closed
@drraghavendra
Copy link

Pull Request Details are as follows #137

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement New feature or request hacktoberfest
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@JBAhire @drraghavendra