René's URL Explorer Experiment


Title: GitHub - CAS-testing/nodejs-goof: Super vulnerable todo list application · GitHub

Open Graph Title: GitHub - CAS-testing/nodejs-goof: Super vulnerable todo list application

X Title: GitHub - CAS-testing/nodejs-goof: Super vulnerable todo list application

Description: Super vulnerable todo list application. Contribute to CAS-testing/nodejs-goof development by creating an account on GitHub.

Open Graph Description: Super vulnerable todo list application. Contribute to CAS-testing/nodejs-goof development by creating an account on GitHub.

X Description: Super vulnerable todo list application. Contribute to CAS-testing/nodejs-goof development by creating an account on GitHub.

Opengraph URL: https://github.com/CAS-testing/nodejs-goof

X: @github

direct link

Domain: github.com

route-pattern/:user_id/:repository
route-controllerfiles
route-actiondisambiguate
fetch-noncev2:fdbd99af-11f3-d4f7-d5b4-f12c45165038
current-catalog-service-hashf3abb0cc802f3d7b95fc8762b94bdcb13bf39634c40c357301c4aa1d67a256fb
request-idD136:290EEE:6997C5:8BC121:6A5C07DF
html-safe-nonce879878518c42a13900fee69987f3cde8f4ed8df0baf7233b1f2b05d72b7f18a0
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJEMTM2OjI5MEVFRTo2OTk3QzU6OEJDMTIxOjZBNUMwN0RGIiwidmlzaXRvcl9pZCI6IjE2MDAxODg1NTU4MDQyODA3OTkiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==
visitor-hmacc520b44ff0183981bb92d13bdf66bcbb52c12beb999d96a58b496f121d6aecb7
hovercard-subject-tagrepository:1279115357
github-keyboard-shortcutsrepository,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location//
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/CAS-testing/nodejs-goof
twitter:imagehttps://opengraph.githubassets.com/9ad56efe8618ec04ba6b434cdef28ac9935ca4cab9e5af9d614c412c9896b196/CAS-testing/nodejs-goof
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/9ad56efe8618ec04ba6b434cdef28ac9935ca4cab9e5af9d614c412c9896b196/CAS-testing/nodejs-goof
og:image:altSuper vulnerable todo list application. Contribute to CAS-testing/nodejs-goof development by creating an account on GitHub.
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
None5290d7e14309ad1e76106a9c4237bd1041517e83ea182c8ab756752cb0c6940b
turbo-cache-controlno-cache
go-importgithub.com/CAS-testing/nodejs-goof git https://github.com/CAS-testing/nodejs-goof.git
octolytics-dimension-user_id240701541
octolytics-dimension-user_loginCAS-testing
octolytics-dimension-repository_id1279115357
octolytics-dimension-repository_nwoCAS-testing/nodejs-goof
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forktrue
octolytics-dimension-repository_parent_id52284593
octolytics-dimension-repository_parent_nwosnyk-labs/nodejs-goof
octolytics-dimension-repository_network_root_id52284593
octolytics-dimension-repository_network_root_nwosnyk-labs/nodejs-goof
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release9c975978430e9ad293956f2bbdaf153b1bd84a99
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/CAS-testing/nodejs-goof#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FCAS-testing%2Fnodejs-goof
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/open-source/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/open-source/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FCAS-testing%2Fnodejs-goof
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E&source=header-repo&source_repo=CAS-testing%2Fnodejs-goof
Reloadhttps://github.com/CAS-testing/nodejs-goof
Reloadhttps://github.com/CAS-testing/nodejs-goof
Reloadhttps://github.com/CAS-testing/nodejs-goof
Please reload this pagehttps://github.com/CAS-testing/nodejs-goof
CAS-testing https://github.com/CAS-testing
nodejs-goofhttps://github.com/CAS-testing/nodejs-goof
snyk-labs/nodejs-goofhttps://github.com/snyk-labs/nodejs-goof
Notifications https://github.com/login?return_to=%2FCAS-testing%2Fnodejs-goof
Fork 0 https://github.com/login?return_to=%2FCAS-testing%2Fnodejs-goof
Star 0 https://github.com/login?return_to=%2FCAS-testing%2Fnodejs-goof
Code https://github.com/CAS-testing/nodejs-goof
Pull requests 0 https://github.com/CAS-testing/nodejs-goof/pulls
Actions https://github.com/CAS-testing/nodejs-goof/actions
Projects https://github.com/CAS-testing/nodejs-goof/projects
Security and quality 0 https://github.com/CAS-testing/nodejs-goof/security
Insights https://github.com/CAS-testing/nodejs-goof/pulse
Code https://github.com/CAS-testing/nodejs-goof
Pull requests https://github.com/CAS-testing/nodejs-goof/pulls
Actions https://github.com/CAS-testing/nodejs-goof/actions
Projects https://github.com/CAS-testing/nodejs-goof/projects
Security and quality https://github.com/CAS-testing/nodejs-goof/security
Insights https://github.com/CAS-testing/nodejs-goof/pulse
https://github.com/CAS-testing/nodejs-goof
Brancheshttps://github.com/CAS-testing/nodejs-goof/branches
Tagshttps://github.com/CAS-testing/nodejs-goof/tags
https://github.com/CAS-testing/nodejs-goof/branches
https://github.com/CAS-testing/nodejs-goof/tags
113 Commitshttps://github.com/CAS-testing/nodejs-goof/commits/main/
https://github.com/CAS-testing/nodejs-goof/commits/main/
.githubhttps://github.com/CAS-testing/nodejs-goof/tree/main/.github
.githubhttps://github.com/CAS-testing/nodejs-goof/tree/main/.github
entityhttps://github.com/CAS-testing/nodejs-goof/tree/main/entity
entityhttps://github.com/CAS-testing/nodejs-goof/tree/main/entity
exploitshttps://github.com/CAS-testing/nodejs-goof/tree/main/exploits
exploitshttps://github.com/CAS-testing/nodejs-goof/tree/main/exploits
publichttps://github.com/CAS-testing/nodejs-goof/tree/main/public
publichttps://github.com/CAS-testing/nodejs-goof/tree/main/public
routeshttps://github.com/CAS-testing/nodejs-goof/tree/main/routes
routeshttps://github.com/CAS-testing/nodejs-goof/tree/main/routes
servicehttps://github.com/CAS-testing/nodejs-goof/tree/main/service
servicehttps://github.com/CAS-testing/nodejs-goof/tree/main/service
testshttps://github.com/CAS-testing/nodejs-goof/tree/main/tests
testshttps://github.com/CAS-testing/nodejs-goof/tree/main/tests
viewshttps://github.com/CAS-testing/nodejs-goof/tree/main/views
viewshttps://github.com/CAS-testing/nodejs-goof/tree/main/views
.gitignorehttps://github.com/CAS-testing/nodejs-goof/blob/main/.gitignore
.gitignorehttps://github.com/CAS-testing/nodejs-goof/blob/main/.gitignore
Dockerfilehttps://github.com/CAS-testing/nodejs-goof/blob/main/Dockerfile
Dockerfilehttps://github.com/CAS-testing/nodejs-goof/blob/main/Dockerfile
LICENSEhttps://github.com/CAS-testing/nodejs-goof/blob/main/LICENSE
LICENSEhttps://github.com/CAS-testing/nodejs-goof/blob/main/LICENSE
README.mdhttps://github.com/CAS-testing/nodejs-goof/blob/main/README.md
README.mdhttps://github.com/CAS-testing/nodejs-goof/blob/main/README.md
app.jshttps://github.com/CAS-testing/nodejs-goof/blob/main/app.js
app.jshttps://github.com/CAS-testing/nodejs-goof/blob/main/app.js
app.jsonhttps://github.com/CAS-testing/nodejs-goof/blob/main/app.json
app.jsonhttps://github.com/CAS-testing/nodejs-goof/blob/main/app.json
deploy-heroku.mdhttps://github.com/CAS-testing/nodejs-goof/blob/main/deploy-heroku.md
deploy-heroku.mdhttps://github.com/CAS-testing/nodejs-goof/blob/main/deploy-heroku.md
docker-compose.ymlhttps://github.com/CAS-testing/nodejs-goof/blob/main/docker-compose.yml
docker-compose.ymlhttps://github.com/CAS-testing/nodejs-goof/blob/main/docker-compose.yml
example111.jsonhttps://github.com/CAS-testing/nodejs-goof/blob/main/example111.json
example111.jsonhttps://github.com/CAS-testing/nodejs-goof/blob/main/example111.json
mongoose-db.jshttps://github.com/CAS-testing/nodejs-goof/blob/main/mongoose-db.js
mongoose-db.jshttps://github.com/CAS-testing/nodejs-goof/blob/main/mongoose-db.js
package-lock.jsonhttps://github.com/CAS-testing/nodejs-goof/blob/main/package-lock.json
package-lock.jsonhttps://github.com/CAS-testing/nodejs-goof/blob/main/package-lock.json
package.jsonhttps://github.com/CAS-testing/nodejs-goof/blob/main/package.json
package.jsonhttps://github.com/CAS-testing/nodejs-goof/blob/main/package.json
sarif.jsonhttps://github.com/CAS-testing/nodejs-goof/blob/main/sarif.json
sarif.jsonhttps://github.com/CAS-testing/nodejs-goof/blob/main/sarif.json
typeorm-db.jshttps://github.com/CAS-testing/nodejs-goof/blob/main/typeorm-db.js
typeorm-db.jshttps://github.com/CAS-testing/nodejs-goof/blob/main/typeorm-db.js
utils.jshttps://github.com/CAS-testing/nodejs-goof/blob/main/utils.js
utils.jshttps://github.com/CAS-testing/nodejs-goof/blob/main/utils.js
READMEhttps://github.com/CAS-testing/nodejs-goof
Licensehttps://github.com/CAS-testing/nodejs-goof
https://github.com/CAS-testing/nodejs-goof#goof---snyks-vulnerable-demo-app
https://snyk.io/test/github/snyk/goof
Dreamers Lab tutorialhttp://dreamerslab.com/blog/en/write-a-todo-list-with-express-and-mongodb/
https://github.com/CAS-testing/nodejs-goof#features
Exploitable packageshttps://github.com/CAS-testing/nodejs-goof#exploiting-the-vulnerabilities
Docker Image Scanninghttps://github.com/CAS-testing/nodejs-goof#docker-image-scanning
Runtime alertshttps://github.com/CAS-testing/nodejs-goof#runtime-alerts
https://github.com/CAS-testing/nodejs-goof#running
http://localhost:3001http://localhost:3001
https://github.com/CAS-testing/nodejs-goof#running-with-docker-compose
https://github.com/CAS-testing/nodejs-goof#heroku-usage
https://github.com/CAS-testing/nodejs-goof#cloudfoundry-usage
https://github.com/CAS-testing/nodejs-goof#cleanup
https://github.com/CAS-testing/nodejs-goof#exploiting-the-vulnerabilities
https://github.com/CAS-testing/nodejs-goof#vulnerabilities-in-open-source-dependencies
Mongoose - Buffer Memory Exposurehttps://snyk.io/vuln/npm:mongoose:20160116
st - Directory Traversalhttps://snyk.io/vuln/npm:st:20140206
ms - ReDoShttps://snyk.io/vuln/npm:ms:20151024
marked - XSShttps://snyk.io/vuln/npm:marked:20150520
https://github.com/CAS-testing/nodejs-goof#vulnerabilities-in-code
https://github.com/CAS-testing/nodejs-goof#code-injection
https://github.com/CAS-testing/nodejs-goof#nosql-injection
https://github.com/CAS-testing/nodejs-goof#open-redirect
https://github.com/CAS-testing/nodejs-goof#hardcoded-values---session-information
https://github.com/CAS-testing/nodejs-goof#docker-image-scanning
https://github.com/CAS-testing/nodejs-goof#runtime-alerts
app.jshttps://github.com/CAS-testing/nodejs-goof/blob/main/app.js#L5
https://github.com/CAS-testing/nodejs-goof#fixing-the-issues
Readme https://github.com/CAS-testing/nodejs-goof#readme-ov-file
Apache-2.0 license https://github.com/CAS-testing/nodejs-goof#Apache-2.0-1-ov-file
Please reload this pagehttps://github.com/CAS-testing/nodejs-goof
Activityhttps://github.com/CAS-testing/nodejs-goof/activity
Custom propertieshttps://github.com/CAS-testing/nodejs-goof/custom-properties
0 forkshttps://github.com/CAS-testing/nodejs-goof/forks
Report repository https://github.com/contact/report-content?content_url=https%3A%2F%2Fgithub.com%2FCAS-testing%2Fnodejs-goof&report=CAS-testing+%28user%29
Releaseshttps://github.com/CAS-testing/nodejs-goof/releases
Packages 0https://github.com/orgs/CAS-testing/packages?repo_name=nodejs-goof
Please reload this pagehttps://github.com/CAS-testing/nodejs-goof
Contributorshttps://github.com/CAS-testing/nodejs-goof/graphs/contributors
Please reload this pagehttps://github.com/CAS-testing/nodejs-goof
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.