project

OopsSec Store

Open-source, intentionally vulnerable e-commerce application built on Next.js, React, TypeScript and Prisma, distributed via npm and Docker Hub as a hands-on security training target with published walkthroughs.

Known aliases

OSS - OopsSec Store
oss-store

Relationships

No evidence-backed relationships are recorded.

Current clusters

build1 publisher

A log dashboard on default credentials hands over every plaintext password

In a deliberately vulnerable training app, a debug statement writes every login password to a cleartext log file, and a monitoring console left on root and admin lets anyone read that file through a browser.

Publishers:dev.to

Reality

Evidence72
Adoption: Insufficient
Hype gap0
Incentives62
Confidence68