mirror of
https://github.com/Strategic-Automation/violin.git
synced 2026-08-14 12:33:37 +02:00
4-file suite evaluating Violin against escape.tech's Duck Store: - benchmark/score.py — evidence-gated scorer (8 fixes from first run) - benchmark/targets/duck-store/challenges.json — 20 article-parity vulns - benchmark/targets/duck-store/scope.yaml — pre-baked scope - benchmark/targets/duck-store/engage.md + report.md — prompts Also adds explicit model section to config.yaml.
408 B
408 B
Perform a comprehensive penetration test of the Duck Store web application at https://duck-store.escape.tech.
The application is an e-commerce platform with a FastAPI backend and React frontend. It has a REST API documented at https://duck-store.escape.tech/openapi.json.
Default credentials:
- admin / admin
- user / password
Register an account first, then begin testing. The site resets every 2 hours.