0:26:34
Pygoat - Learn django security the hard way
DjangoCon US 2024 · December 6, 2024
Adarsh Divakaran uses Pygoat, an intentionally vulnerable Django application, to demonstrate how common web security flaws can be exploited and prevented. He shows SQL injection bypassing a login, shell injection executing commands, security misconfiguration exposing secrets, an outdated PyYAML dependency enabling code execution, and weak…