Skip to content
GitLab
Select Git revision
  • dependabot/npm_and_yarn/http-cache-semantics-4.1.1
  • main default
  • v1.0.1
Find file BlameHistoryPermalink
README.md 653 bytes

DVEA (In Progress)

Damn Vulnerable ElectronJS App (DVEA) is a purposely built vulnerable ElectronJS app for developers and security engineer.

It contains major vulnerabilities that are specific to ElectronJS environment.

The app demonstrates a vulnerable to do list, following vulnerabilties are currently added to the app:

  1. Cross Site Scripting
  2. XSS to RCE
  3. Deep Links to XSS
  4. Deep Links to RCE

Running from source

git clone https://github.com/njmulsqb/DVEA
cd DVEA
npm i
electron .

This App Is Vulnerable, DO NOT RUN IN PRODUCTION ENVIRONMENT

Credits

The app is built on https://github.com/CodeDraken/electron-todo