vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable PHP Interface that demonstrates OWASP API Top 10 in the means of Exercises.
- Apache Server
- MySQL
- PostMan
- MITM Proxy
cd <your-hosting-directory>
git clone https://github.com/roottusk/vapi.git
Import vAPI.postman_collection.json in Postman
Import vapi.sql into MySQL Database
Configure the DB Credentials in the vapi/db/var.php
Browse localhost/vapi for Documentation