infosec-soup/vuln-nodejs-app

This is a deliberately vulnerable NodeJS web application designed for security training and education. It contains over 25 common web vulnerabilities including SQL injection, XSS, command injection, and authentication flaws, making it an ideal tool for penetration testers, developers, and students to practice identifying and exploiting security vulnerabilities through both black-box and white-box testing approaches.