hunt-django

What problem does it solve?

Django web applications have unique, often overlooked attack surfaces including Django REST Framework permission misconfigurations, ORM injection vectors, exposed admin panels, and unsafe template rendering that generic vulnerability scanners frequently miss.

Core Features & Use Cases

• DRF Permission Gap Detection: Identifies misconfigured Django REST Framework permission classes that expose sensitive API endpoints to unauthenticated users.
• ORM Injection Hunting: Locates raw query injection points in Django ORM usage, extra() clauses, and RawSQL annotations.
• Admin Panel Exploitation Checks: Enumerates Django admin interfaces, tests for weak credentials, and validates session cookie forgery opportunities via leaked SECRET_KEY.
• Template Injection Discovery: Finds unsafe uses of mark_safe and the |safe template filter that enable server-side template injection. Use Case: During a red team engagement against a Django-based customer portal, use this skill to quickly identify if unauthenticated users can access restricted user data via misconfigured DRF endpoints or exploit the admin panel with common credentials.

Quick Start

Use the hunt-django skill to test a Django REST API endpoint for unauthenticated access to sensitive user data.