Kali Linux

Ninjas workout : Vulnerable NodeJS Web Application

Ninjas workout is a Vulnerable NodeJS Web Application.

Quick Start

Download the Repo =>
run npm i

After Installing all dependency just run the application

node app.js or nodemon app.js

ADDED BUGS

  • Prototype Pollution
  • No SQL Injection
  • Cross site Scripting
  • Broken Access Control
  • Broken Session Management
  • Weak Regex Implementation
  • Race Condition
  • CSRF -Cross Site Request Forgery
  • Weak Bruteforce Protection
  • User Enumeration
  • Reset Password token leaking in Referrer
  • Reset Password bugs
  • Sensitive Data Exposure
  • Unicode Case Mapping Collision
  • File Upload
  • SSRF
  • XXE
  • Open Redirection
  • Directory Traversal
  • Insecure Deserilization => Remote Code Execution
  • Server Side Template Injection
  • Timing Attack
R K

Recent Posts

git fetch vs git pull: How They Work and When to Use Each

Both git fetch and git pull talk to a remote repository, but they do very different things to your…

3 days ago

git cherry-pick Command: Apply Commits from Another Branch

Sometimes the change you need already exists, just on the wrong branch. A hotfix lands…

3 days ago

Best Email APIs for Secure Business Email: Why Developers Are Moving Beyond SMTP

Email is still one of the most important communication channels inside modern applications. Password resets,…

4 days ago

Nginx Commands in Linux: Start, Stop, Reload, Test, and Log

Nginx is a high-performance web server and reverse proxy trusted by some of the largest…

6 days ago

ufw Command in Linux: Manage Firewall Rules with Examples

ufw (Uncomplicated Firewall) sits on top of iptables (or nftables on newer systems) and replaces…

6 days ago

who Command in Linux: Show All Logged-In Users and Sessions

When you share a server with a team or investigate unexpected activity, the first question…

6 days ago