Skip to content
/ chat.js Public

Chat.JS - Vulnerable NodeJS Web-App to practice NoSQLi and Deserialization exploitation

Notifications You must be signed in to change notification settings

bmdyy/chat.js

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

13 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Chat.JS (Vulnerable NodeJS Web-App)

Metadata

  • William Moody
  • 21.03.2021

Description

A small web app writen in Node.JS to practice NoSQLi and deserialization exploits.

Working exploits as well as explainations may be found in ./exploit

How to run locally

  1. Clone this repo: git clone https://github.com/bmdyy/chat.js
  2. Enter folder: cd chat.js
  3. Run: docker build -t chatjs .
  4. Run: docker run -t chatjs

To find the docker container's IP:

  1. Run: docker inspect --format '{{ .NetworkSettings.IPAddress }}' $(docker ps -q)

To kill docker:

  1. Run: docker ps and copy the id
  2. Run: docker kill <id>

The app is running on http://IP:3000

About

Chat.JS - Vulnerable NodeJS Web-App to practice NoSQLi and Deserialization exploitation

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published