Vulnerable Reddit can you pwd?

Reddit Clone is designed as a CTF challenge to help developers practice identifying, exploiting and mitigate common vulnerabilities in modern web applications. I intentionally included vulnerabilities such as XSS's, SSRF, SQL injection ,multiple IDORs, and file upload vulnerabilities. The goal is to offer a safe and controlled environment where security enthusiasts can hone their skills in a fun and challenging way. Despite these vulnerabilities, I utilize secure technologies such as Google Cloud, Next.js, Chakra UI, TypeScript, and Recoil. The platform allows users to create and join communities, upvote and downvote posts, and engage in real-time community chat and Dark Mode & Light Mode.

📔 Table of Contents

• About the Project
  • Screenshots
  • Tech Stack
  • Environment Variables
• Getting Started
  • Prerequisites
  • Run Locally
  • Deployment
• Vulnerabilities

🌟 About the Project

📷 Screenshots

• Create Community, Join Community, Leave Community, Upvote and Downvote Posts(you can only post in a community)

• User Profile Section

• Conversation Section (Reddit Clone Live Chat)

LIVE DEMO 💥

👾 Tech Stack

Client

• Typescript
• Next.js
• React.js
• Chakra UI

Database

• Firebase

Functions

• Cloud Functions for Firebase

🧰 Getting Started

‼️ Prerequisites

• Sign up for a Firebase account HERE
• Install Node JS in your computer HERE

🔑 Environment Variables

To run this project, you will need to add the following environment variables to your .env file

NEXT_PUBLIC_FIREBASE_API_KEY

NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN

NEXT_PUBLIC_FIREBASE_PROJECT_ID

NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET

NEXT_PUBLIC_FIREBASE_MESSAGING_SET

NEXT_PUBLIC_FIREBASE_APP_ID

NEXT_PUBLIC_BASE_URL

🏃 Run Locally

Clone the project

  git clone https://github.com/Am0stafa/Reddit-Clone.git

change directory

  cd Reddit-Clone

Install dependencies

  npm install

🔶 Dependency Info

Start the server

  npm run dev

Visit the app

  http://localhost:3000

---

Deployment

The easiest way to deploy your Next.js app is to use the Vercel Platform from the creators of Next.js.

Check out our Next.js deployment documentation for more details.

Vulnerabilities

Reflected XSS

• Solution

  • there goes the solution
• Hint

  • there goes the hit

Stored XSS

• Solution

  • there goes the solution
• Hint

  • there goes the hit