Skip to content

Fix case and one ) too many. #3

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
bararchy wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Fix case and one ) too many. #3

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
ad8a6e2
Update README.md
bararchy Nov 20, 2024
9a9eaf8
Update README.md
bararchy Nov 20, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,8 +9,8 @@ USE WITH CAUTION
## Quick Start with docker

1. Install Docker
2. Run docker `pull sirappsec/nodejs-vulnerable-app`
Run `docker run --rm -p 5000:5000 sirappsec/nodejs-vulnerable-app`
2. Run `docker pull sirappsec/nodejs-vulnerable-app`
Run `docker run --rm -p 3000:3000 sirappsec/nodejs-vulnerable-app`
3. Browse to http://localhost:3000 (on macOS and Windows browse to http://192.168.99.100:3000 if you are using docker-machine instead of the native docker installation)

## Quick Start with npm
Expand Down Expand Up @@ -48,16 +48,16 @@ While NodeGoat cover mostly OWASP Top 10(inc SSRF and ReDos). This project have
* Horizontal Privilege escalation
* Insecure Object Deserialization
* CSRF - Cross Site Request Forgery
* SSRF - Server Side Request Forgery)
* SSRF - Server Side Request Forgery
* Click Jacking / Lack of Security Headers
* Insecure Redirect
* Vulnerable and Outdated Components (Probably, lol)
* Forced Browsing
* Password Hash With Insufficient Computational Effort
* Excessive data exposure
* Excessive Data Exposure
* PII Leak - Personal Identifiable Information Exposure
* BOLA - Broken Object Level Authorization
* Broken user Authentication
* Broken User Authentication
* Mass Assignment
* User Enumeration
* Improper Asset management
Expand All @@ -70,7 +70,7 @@ While NodeGoat cover mostly OWASP Top 10(inc SSRF and ReDos). This project have
* Uverified JWT manipulation
* JWT Secret Key Brute Force
* Template injection (SSTI)
* Reflected+ Stored XSS - Cross Site Scripting
* Reflected + Stored XSS - Cross Site Scripting

## Todo
* Insecure TLS Validation
Expand Down