PAYGoat
PAYGoat is a banking application built for educational purposes, focused on exploring and understanding common business logic flaws in financial platforms.
파일 탐색기
최종 버전 다운로드 (.zip)- FUNDING.yml
- accountController.js
- auditController.js
- authController.js
- businessUsersController.js
- BusinnesAccountsController.js
- companySettingsController.js
- companyTransfersController.js
- creditCardController.js
- otpController.js
- paymentController.js
- paymentUUIDController.js
- profileBusinessUserController.js
- ticketController.js
- userController.js
- userLoansController.js
- paygoat.db
- authenticate.js
- bunisses_transacctions.js
- loans.js
- otps.js
- tickets.js
- ticketsRoutes.js
- transaction.js
- user.js
- accountRoutes.js
- authRoutes.js
- businessRoutes.js
- ccRoutes.js
- loansRoutes.js
- otpRoutes.js
- paymentRoutes.js
- paymentUUIDRoutes.js
- ticketsRoutes.js
- userRoutes.js
- crypto.js
- logger.js
- otpGenerator.js
- Dockerfile
- package.json
- server.js
- swagger.json
- favicon.ico
- index.html
- logo192.png
- logo512.png
- manifest.json
- robots.txt
- ForgotPassword.js
- Login.js
- Register.js
- ApproveTransactions.js
- BunissesProfile.js
- businessAudit.js
- businessSettings.js
- BusinessUsers.js
- BusinnesAccounts.js
- CompanySettings.js
- CompanyTransfers.js
- CreditCard.js
- DeleteUser.js
- MainPage.js
- paygoat.png
- Tickets.js
- TransactionHistory.js
- Transactions.js
- Transactionsuuid.js
- UpdatePassword.js
- UpdateUser.js
- UserAccounts.js
- UserLoans.js
- UserProfile.js
- UserRequestLoans.js
- Api.js
- getUserAccounts.js
- App.css
- App.js
- App.test.js
- index.css
- index.js
- logo.svg
- reportWebVitals.js
- setupTests.js
- .env
- Dockerfile
- package.json
- logo.png
- telegram.png
- card1.png
- card2.png
- card3.png
- card4.png
- card5.png
- card6.png
- img001.png
- img002.png
- img003.png
- img004.png
- img005.png
- img006.png
- img007.png
- img008.png
- img009.png
- img010.png
- img011.png
- img012.png
- img013.png
- img014.png
- img015.png
- loan1.png
- loan2.png
- loan3.png
- loan4.png
- loan5.png
- loan6.png
- negative1.png
- negative2.png
- PayGOAT-IDOR-Profil-01.png
- PayGOAT-IDOR-Profil-02.png
- PayGOAT-IDOR-Profil-03.png
- PayGOAT-IDOR-Profil-04.png
- PayGOAT-IDOR-Profil-05.png
- PayGOAT-IDOR-Profil-06.png
- PayGOAT-IDOR-Profil-07.png
- PayGOAT-IDOR-Profil-08.png
- PayGOAT-IDOR-Profil-09.png
- PayGOAT-IDOR-Profil-10.png
- PayGOAT-IDOR-Profil-11.png
- PayGOAT-IDOR-Profil-12.png
- PayGOAT-IDOR-Profil-13.png
- PayGOAT-IDOR-Profil-14.png
- PayGOAT-IDOR-Profil-15.png
- PayGOAT-IDOR-Profil-16.png
- PayGOAT-IDOR-Profil-17.png
- PayGOAT-IDOR-Profil-18.png
- PayGOAT-IDOR-Profil-19.png
- PayGOAT-IDOR-Profil-20.png
- PayGOAT-IDOR-Profil-21.png
- profile1.png
- profile2.png
- profile3.png
- profile4.png
- profile5.png
- rate1.png
- rate2.png
- rate3.png
- uuid1.png
- uuid2.png
- uuid3.png
- 00_otp_leak_in_the_response.md
- 01_rate-limiting_otp_generation.md
- 02_user_enumeration_via_phone_number.md
- 03_otp_brute-force-attack.md
- 04_pii_of_users_isclosure.md
- 05_jwt_weak_mac.md
- 06_view_information_of_other_accounts.md
- 07_negative_numbers_in_third-party_transfers.md
- 08_currency_exchange_rate_manipulation.md
- 09_account_swapping_in_ransfers.md
- 10_unauthorized_account_swap_in_third_party_transfers_using_uuid.md
- 11_access_to_other_users_cards_via_insecure_encryption.md
- 12_race_condition_in_loan_requests.md
- 13_unauthorized_profile_field_modification.md
- Introduction.md
- README.md
- docker-compose.yml
- LICENSE
- logo.svg
- paygoat.csv
- README.md
- runner.bat
- runner.sh
// repository documentation
Was this content helpful?
(0 ratings)