Damn Vulnerable NodeJS Application (DVNA) is a simple NodeJS application to demonstrate OWASP Top 10 Vulnerabilities and guide on fixing and avoiding these vulnerabilities
The application is powered by commonly used libraries such as express, passport, sequelize, etc.
A detailed guide on exploiting, fixing and avoiding OWASP Top 10 Vulnerabilities can be found at https://appsecco.github.io/dvna which will contain the following
- How to exploit the vulnerability
- Vulnerable code snippets and fixes
- Recommendations on how to avoid such bugs
- References for learning more
Clone this repository
git clone https://github.com/appsecco/dvna; cd dvna
Create a .env file like the with desired database configuration
MYSQL_USER=dvna
MYSQL_DATABASE=dvna
MYSQL_PASSWORD=passw0rd
MYSQL_RANDOM_ROOT_PASSWORD=yes
And run docker-compose up to start the application and database using docker.
For this, you will need to create a new database on a MySQL Server and a user with write access on it
Clone this repository
git clone https://github.com/appsecco/dvna; cd dvna
Set the environment variables with your database information
export MYSQL_USER=dvna
export MYSQL_DATABASE=dvna
export MYSQL_PASSWORD=passw0rd
export MYSQL_HOST=127.0.0.1
export MYSQL_PORT=3306Then run npm install to install the dependencies and npm start to start the application
Abhisek Datta - abhisek for application architecture and front-end code
MIT