DHC_cyber-security-internship-week1

# 🔐 Cyber Security Internship – Week 1
## Vulnerable Web Application (Security Assessment Phase)

---

## 📌 Project Overview

This project was developed as part of my Cybersecurity Internship (Week 1).  

The goal of Week 1 was to:
- Create a functional web application
- Perform security assessment
- Identify vulnerabilities
- Document findings

This version of the application intentionally contains security weaknesses for testing and learning purposes.

---

## 🛠️ Technologies Used

- Node.js
- Express.js
- SQLite
- HTML/CSS
- OWASP ZAP

---

## 🚀 How to Run the Project

1. Install dependencies:


npm install


2. Start the server:


node server.js


3. Open browser:


http://localhost:3000


---

## 🔍 Security Testing Performed

Security assessment was conducted using:

- OWASP ZAP (Automated Scan)
- Manual SQL Injection Testing
- Browser Developer Tools

---

## ❌ Vulnerabilities Identified

### 1️⃣ SQL Injection (High Risk)
- Login form vulnerable to:

' OR '1'='1

- Allowed authentication bypass

---

### 2️⃣ Plain Text Password Storage
- Passwords stored directly in database
- No encryption or hashing

---

### 3️⃣ Missing Security Headers
- No Content Security Policy
- No X-Frame-Options
- No X-Content-Type-Options

---

### 4️⃣ Server Information Disclosure
- Backend technology exposed in HTTP headers

---

## 📊 Security Status

⚠️ This version is intentionally vulnerable for assessment purposes.  
Do NOT deploy in production.

---

## 📁 Internship Context

This project represents **Week 1 – Security Assessment Phase** of my Cybersecurity Internship, where vulnerabilities were identified and documented.

Week 2 contains the secured version of this application.