trape · Issues· 255 open

awdwad

[Security] TOCTOU race condition allows duplicate victim registration in /register

[Security] IDOR: victim telemetry endpoints trust client-supplied vId with no ownership check

[Security] Unauthenticated Socket.IO /trape namespace allows room hijack and command injection

[Security] Authentication bypass: admin API endpoints lack session enforcement after /login

I wanna heck sameone id

Location Optimisation Browser Bypass

Url error object has no attribute massage

Trape Usage

ERROR: No module named 'flask_socketio'

Gg

Google Maps API Key

Improving Security in injectCSS_Paths Function (Line 278-285)

Hardcoded API Keys (Lines 71-75)

Remove Unused Imports (Lines 16, 26)