discovered 03 Aug 2026
NodeGoat
→ View on GitHubNodeGoat is a vulnerable web application designed to help developers understand and mitigate the OWASP Top 10 security risks in Node.js applications. It provides both an educational tutorial and a hands-on environment where users can exploit vulnerabilities, implement fixes, and test their understanding of secure coding practices. Notable features include a pre-populated database of user accounts and a detailed tutorial accessible within the application.