fortifydocker/iwa-dotnet repository overview

IWA (Insecure Web App) .NET Edition is an example Microsoft.NET Core Web Application for use in DevSecOps scenarios and demonstrations. It includes some examples of bad and insecure code - which can be found using static and dynamic application security testing tools such as those provided by Micro Focus Fortify.

The application is intended to provide the functionality of a typical "online pharmacy", including purchasing Products (medication) and requesting Services (prescriptions, health checks etc). It has a modern-ish HTML front end (with some JavaScript) and a GraphQL API.

Source code for this application is available at https://github.com/fortify/IWA-DotNet⁠

Please note: the application should NOT be deployed in a production or other sensitive environment - use at your own risk!