A deliberately vulnerable REST API built with PHP and MySQL.

ExploitMe REST 2.0

URL Method Parameters Description
v1/register POST name, email, password, admin User registration
v1/login POST email, password User login
v1/products GET   View products
v1/products?id=XX GET id View a particular product
v1/cart-update POST type, user, product_code, product_name, quantity, price
Header: Authorization
Add/Remove cart products
v1/manage POST product_code, product_name, product_desc, product_img_name, price
Header: Authorization
Add new product
v1/manage DELETE product_code
Header: Authorization
Delete a product

ExploitMe REST 1.0

URL Method Parameters Description
v1/register POST name, email, password User registration
v1/login POST email, password User login
v1/posts GET   View posts
v1/posts?id=XX GET id View particular post
v1/post POST title, content, fileUpload
Header: Authorization
Create a new post
v1/post?id=XX DELETE Header: Authorization Delete post