bugwrangler

bugwrangler.dev

Website

AWSGoat

AWSGoat : A Damn Vulnerable AWS Infrastructure

bugwrangler

cdkgoat

CdkGoat is Bridgecrew's "Vulnerable by Design" AWS CDK repository. CdkGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

cfngoat

Cfngoat is Bridgecrew's "Vulnerable by Design" Cloudformation repository. Cfngoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

cloud-custodian

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

csharp

Work In Progress

dvcsharp-api

Damn Vulnerable C# Application (API)

dvja

Damn Vulnerable Java (EE) Application

dvna

Damn Vulnerable NodeJS Application

eze-cli

Eze, the security tool orchestrator

getting-started-k8s

Code and YAML files for Getting Started with Kubernetes video course on Pluralsight

goof

Super vulnerable todo list application

IpTv

java-goof

jenkins-on-aws

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

KaiMonkey

KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.

kics

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

kubernetes-goat

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

oqtane.framework

Modular Application Framework for Blazor

PasswordPusher

🔐 Password Pusher is an application to securely communicate passwords over the web. Passwords automatically expire after a certain number of views and/or time has passed.

snyk-delta

snyk-iac-workshop

sonar-report

Generates an html report from SonarQube

terragoat

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

user-docs

Gitbook documentation repo.

vulnerable-spring-boot-application

vulpy

Vulnerable Python Application To Learn Secure Development