NodeGoat

**OWASP NodeGoat** is an open source project designed to learn and practice Node.js Web application security. Launched by OWASP (Open Web Application Security Project), it aims to help developers understand and practice OWASP Top 10 Web application security risks and how to effectively defend against these common vulnerabilities in Node.js applications. You can use it after registering yourself. ###Main characteristics - ** Safe learning environment **: NodeGoat provides a sample application that contains real-world vulnerabilities that developers can deploy, test, and fix in a local or cloud environment. - ** Built-in tutorial **: The application comes with a detailed Chinese/English tutorial page that systematically explains the principles and repair methods of the OWASP Top 10 vulnerability. - ** Multiple deployment methods **: Support local deployment (Node.js + MongoDB), Docker one-click deployment, and Heroku cloud deployment, suitable for different learning and experimental needs. - ** Preset account **: The application has built-in administrator and ordinary user accounts, making it convenient for direct security testing and drills. - ** Open source **: The code is completely open source, easy to learn, research and secondary development. ###Applicable population - Web developers - safety Engineer - penetration testers - Safety training instructor - Technology enthusiasts interested in Web security ###Main learning content - SQL Injection (SQLi) - Cross-site Scripting (XSS) - Unsecure authentication and session management - Unsafe direct object references - Security configuration error - Sensitive data disclosure - and more OWASP Top 10 Risks