TiredfulAPI

### Tiredful API Application Introduction **Tiredful API** is a ** deliberately designed REST API Web application with security vulnerabilities ** designed to help developers, testers, and security practitioners understand and learn common vulnerabilities in Web services caused by unsafe coding practices. ####Applicable population - Web developers - Web penetration testers - security professionals - Students and safety enthusiasts ####Main vulnerabilities covered Tiredful APIs cover common Web API security vulnerabilities as much as possible, including but not limited to: - information leakage - Unsafe Direct Object References (IDOR) - Access control vulnerability - Interface current limiting problem - SQL injection (take SQLite as an example) - Cross-site scripting attack (XSS) ####Usage The Tiredful API is developed based on Django and the Django Rest Framework and supports running through source code or Docker containers. Users can quickly deploy and conduct security testing and learning locally. ####Contributions and feedback Members of the security community are welcome to submit suggestions for new vulnerability scenarios or give feedback on problems in use. For details, please refer to the project homepage or contact the author via email. ####Project Goals By simulating real-world security vulnerabilities, Tiredful API helps users improve their ability to identify and defend against Web API security risks, making it an ideal platform for security learning and training.