Ninjasworkout - Vulnerable NodeJS Web Application

2 years ago 152

BOOK THIS SPACE FOR AD

ARTICLE AD

Quick Start

Download the Repo =>

run npm i

Afer Installing all dependency just run the application

node app.js or nodemon app.js

ADDED BUGS

Prototype Pollution No SQL Injection Cross site Scripting Broken Access Control Broken Session Management Weak Regex Implementation Race Condition CSRF -Cross Site Request Forgery Weak Bruteforce Protection User Enumeration Reset Password token leaking in Referrer Reset Password bugs Sensitive Data Exposure Unicode Case Mapping Collision File Upload SSRF XXE Open Redirection Directory Traversal
Insecure Deserilization => Remote Code Execution Server Side Template Injection
Timing Attack

Reset Password Module will not work !! You have to configure SMTP !! in utils=>sendmail.js

Improvement in User Interface Add New Vulnerabilities on weekly basis Add Documentation of all the Vulnerabilites In case of bugs in the application, feel free to create an issues on github. Feel free to create a pull request for any contribution.

Ninjasworkout - Vulnerable NodeJS Web Application Reviewed by Zion3R on 5:30 PM Rating: 5