A purposefully vulnerable application built with React (frontend) and Java Spring (backend). It is meant to be used for testing and learning about security vulnerabilities.

It is built using reactvulna and javulna by edusecmachine with some light modifications to make them work instantly with docker compose.

• Have Docker and Docker Compose installed

• Clone the repository and update the Git submodules

git clone https://github.com/vulnerable-apps/vulnerable-react-app.git
cd vulnerable-react-app
git submodule init
git submodule update --remote --merge

• Build and run the app

docker-compose up -d

• vulnerable-apps/reactvulna
• vulnerable-apps/javulna