Skip to content

Sample "hello world" express.js app, with lots of AI-generated synthetic vulnerabilities

License

Notifications You must be signed in to change notification settings

r2c-CSE/vulnerable-express-app

Repository files navigation

Vulnerable Project

Express.js application with intentional security vulnerabilities for testing security scanners.

Setup

npm install
npm start

Testing

npm test

Security Scanning

This project contains various security vulnerabilities including:

  • Command injection
  • Code injection (eval, Function)
  • Path traversal
  • Unsafe deserialization

Use with Semgrep or other security scanners to test detection capabilities.

About

Sample "hello world" express.js app, with lots of AI-generated synthetic vulnerabilities

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published