Ninjas workout : Vulnerable NodeJS Web Application

Ninjas workout is a Vulnerable NodeJS Web Application.

Quick Start

Download the Repo =>
run npm i

After Installing all dependency just run the application

node app.js or nodemon app.js

ADDED BUGS

• Prototype Pollution 
• No SQL Injection 
• Cross site Scripting 
• Broken Access Control 
• Broken Session Management 
• Weak Regex Implementation 
• Race Condition 
• CSRF -Cross Site Request Forgery 
• Weak Bruteforce Protection 
• User Enumeration 
• Reset Password token leaking in Referrer 
• Reset Password bugs 
• Sensitive Data Exposure 
• Unicode Case Mapping Collision 
• File Upload 
• SSRF 
• XXE
• Open Redirection 
• Directory Traversal 
• Insecure Deserilization => Remote Code Execution 
• Server Side Template Injection 
• Timing Attack