Demonstrations added (!15) · Merge requests · websites / vulpes · GitLab

GitLab now enforces expiry dates on tokens that originally had no set expiration date. Those tokens were given an expiration date of one year later. Please review your personal access tokens, project access tokens, and group access tokens to ensure you are aware of upcoming expirations. Administrators of GitLab can find more information on how to identify and mitigate interruption in our documentation.

Self sign-up has been disabled due to increased spam activity. If you want to get access, please send an email to a project owner (preferred) or at gitlab(at)nic(dot)cz. We apologize for the inconvenience.

Vojtěch Žák requested to merge 19-demo into main Jun 20, 2023

Added six more demonstrations covering the described vulnerabilities and attacks. Some application implementations had to be changed, notably:

Vulpes Chat uses username instead of first and last name
added admin page to Vulpes Chat
Vulpes Shop requires logging in to add products into cart and place orders

Closes #19 (closed)

Edited Jun 20, 2023 by Vojtěch Žák