chaos-camp / code-challenge-find-the-race-condition Goto Github PK

Objective: Your mission, should you choose to accept it, is to write a series of tests targeting our given environment to expose potential race conditions. After testing, provide a detailed report on the discovered vulnerabilities and how you found them.

Before diving into the challenge, you must set up and run the provided test server. Ensure you have both Docker and Docker-compose installed on your machine.

1. Navigate to the directory containing the Dockerfile and other server files.
2. Build the Docker image with the following command:

docker build -t test-server-image .

1. After building the image, start the test server using:

docker run -p 8000:8000 test-server-image

2. The FastAPI application should be accessible at http://localhost:8000 from your host machine.

1. Set Up the Environment using the provided Docker file and instructions above.
2. Develop the Tests: Use any testing tools/frameworks you prefer. Race conditions often require many requests in quick succession or a particular sequence. Your tests should reproduce race conditions reliably.
3. Report: For each discovered race condition, provide:
   • A description of the vulnerability.
   • Steps to reproduce it.
   • Potential risks associated with the vulnerability.
   • Relevant code snippets or scripts used during testing.
   • Additional notes or observations.

Your submission will be evaluated based on your testing thoroughness, the clarity of your report, and your ability to discover and reproduce race conditions.