Kali Linux

Ninjas workout : Vulnerable NodeJS Web Application

Ninjas workout is a Vulnerable NodeJS Web Application.

Quick Start

Download the Repo =>
run npm i

After Installing all dependency just run the application

node app.js or nodemon app.js

ADDED BUGS

  • Prototype Pollution
  • No SQL Injection
  • Cross site Scripting
  • Broken Access Control
  • Broken Session Management
  • Weak Regex Implementation
  • Race Condition
  • CSRF -Cross Site Request Forgery
  • Weak Bruteforce Protection
  • User Enumeration
  • Reset Password token leaking in Referrer
  • Reset Password bugs
  • Sensitive Data Exposure
  • Unicode Case Mapping Collision
  • File Upload
  • SSRF
  • XXE
  • Open Redirection
  • Directory Traversal
  • Insecure Deserilization => Remote Code Execution
  • Server Side Template Injection
  • Timing Attack
R K

Recent Posts

How Do I Do Reverse Image Search

Have you ever come across a picture on the internet and wondered where it came…

5 days ago

WhatsMyName App – Find Anyone Across 640+ Platforms

Overview WhatsMyName is a free, community-driven OSINT tool designed to identify where a username exists…

2 weeks ago

Analyzing Directory Size Linux Tools Explained

Managing disk usage is a crucial task for Linux users and administrators alike. Understanding which…

2 weeks ago

Understanding Disk Usage with du Command

Efficient disk space management is vital in Linux, especially for system administrators who manage servers…

2 weeks ago

How to Check Directory Size in Linux

Knowing how to check directory sizes in Linux is essential for managing disk space and…

2 weeks ago

Essential Commands for Linux User Listing

Managing user accounts is a core responsibility for any Linux administrator. Whether you’re securing a…

2 weeks ago