This is a vulnerable Node Express service meant to be used as a target for security testing tools.
npm install
node bootstrapdb.js
DEBUG=myapp:* npm start
docker build --tag stackhawk/nodeexpressvulny .
docker run --rm --publish 3000:3000 --name nodeexpressvulny stackhawk/nodeexpressvulny
docker-compose up --build --detach
- SQL Injection via search box. -
item%' union all select * from user; --
- Cross Site Scripting via search box. -
<script>alert("hey guy");</script>
- SCA (SW Composition Analysis) example: dependabot, snyk, FOSSA
- operates on static code
- scanning vuln on library/modules used by SW
- fast
- SAST (Static Application Security Testing) example: CodeQL, sonarqube, checkmarx
- operates on static code
- scanning vuln by pattern on codebase
- high false positives
- slow
- DAST (Dynamic Application Security Testing) example: StackHawk, OWASP ZAP, burp suite
- Operates on running code
- Reports on suspected vuln
- Slow