An example Python API that is vulnerable to several different web API attacks.
https://github.com/mattvaldes/vulnerable-api.git
latest