Mini-Forum is a small CTF-style web application that mimics a simple discussion board. The site contains an XSS vulnerability in its input handling, allowing unescaped user-supplied content to execute scripts in visitors’ browsers, making it a good test target for safe XSS practice and defensive testing in a controlled environment.
- Node.js
- Npm
- Express.js
Follow these step-by-step instructions to download and build the tool:
git clone https://github.com/sty-nathan/mini-forum.git
cd mini-forum
npm init -y node index.js GET /search| Parameter | Type | Description |
|---|---|---|
search_query |
string |
A value of the search |
POST /post| Parameter | Type | Description |
|---|---|---|
title |
string |
Required. Title of the post |
description |
string |
Required. Description of the post |
This project is licensed under the MIT License
- Developed as a learning and security-improvement project by @sty-nathan