akto-api-security / akto

Proactive, Open source API security β†’ API discovery, Testing in CI/CD, Test Library with 150+ Tests, Add custom tests, Sensitive data exposure
https://www.akto.io/
MIT License
977 stars 190 forks source link

⚑️ Support file upload while uploading a template #166

Open ayushaga14 opened 1 year ago

ayushaga14 commented 1 year ago

πŸ’­ Introduction Akto supports addition of new tests via templates. Users can go to Testing Library section in Akto dashboard, and click on Add Test button for adding new test. Currently user has to specify github url for the nuclei template. A sample template for Path Traversal test - https://github.com/akto-api-security/tests-library/blob/master/BOLA/path_traversal/path_traversal_PayloadsAllTheThings.yaml This task involves adding support for adding tests via file upload, where user would now have an option to either specify a github url, or specify a template file. Note that for tests added using file upload, we should not show "Contribute In Github" Subtext

🎯 Requirements Vue.js Java

βœ… Task summary:

✌🏻 Hints Check addCustomTest method inside MarketPlaceAction.java. It currently saves Github url and other details in mongo collection. Here before saving you would have to add a validator method, which for now will just validate whether necessary fields and details are present in the template file. For modifications in the testing part, you can check runNucleiTests, which has one of the input param's (FuzzingTest) which contains template url. πŸ™‹πŸΌβ€β™‚οΈ Questions: If you have questions, need any help, or just want to hang out, make sure to join us on our Discord server.

DiySane commented 10 months ago

Hi @Ankita28g , I am interested in this issue, may I get assigned?

atharvamalji commented 10 months ago

Hey @Anikita28g, I can solve this issue and would love to work on it. Worked with Vue before and using SpringBoot now so have the necessary requisites.