vulnerable-web-app
There are 10 repositories under vulnerable-web-app topic.
OWASP / wrongsecrets
Vulnerable app with examples showing how to not use secrets
Language:Java 1150The OWASP Vulnerable Web Applications Directory project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.
- VAmPILanguage:Python 811
OWASP Vulnerable Web Application Project https://github.com/hummingbirdscyber
Language:PHP 326Checkmarx / capital
A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Security vulnerabilities within your own API Security CTF.
Language:CSS 257- UnSAFE_Bank
lucideus-repo / UnSAFE_Bank
Vulnerable Banking Suite
Language:PHP 138 - template-injection-workshop
GoSecure / template-injection-workshop
Workshop on Template Injection (6 exercises) covering Twig, Jinja2, Tornado, Velocity and Freemaker engines.
Language:CSS 119 lunasec-io / Spring4Shell-POC
This is a dockerized application that is vulnerable to the Spring4Shell vulnerability (CVE-2022-22965).
Language:Python 103appsecco / sqlinjection-training-app
A simple PHP application to learn SQL Injection detection and exploitation techniques.
Language:PHP 94TheTwitchy / vulnd_xxe
A server vulnerable to XXE that can be used to test payloads using the xxer tool.
Language:Java 25The OWASP Vulnerable Web Applications Directory (VWAD) Project - OWASP Web Site
Language:HTML 16karimtariqx / HackerStories
This project is a vulnerable web application to practice on. It is designed for educational purposes to help security enthusiasts and developers understand and mitigate common web vulnerabilities.
Language:PHP 15OWASP Foundation Web Respository
Language:HTML 12- vfapi
naryal2580 / vfapi
Vulnerable FastAPI in reference to Opensource Web Application Security Project (OWASP) TOP 10: 2021
Language:Python 9 OSTEsayed / OSTE-Vulnerable-Web-Application
Vulnerable Web application made with PHP/SQL designed to help new web testers gain some experience and test DAST tools for identifying web vulnerabilities. Containing some of the most well-known vulnerabilities such as SQL, cross-site scripting (XSS), OS command injections, our intention to expand more vulnerabilities for learning purposes.
Language:PHP 9- Language:JavaScript 8
Serhatcck / server-side-prototype-pollution
A website developed with Nodejs. This website includes server side prototype pollution vulnerability
Language:CSS 7Aif4thah / VulnerableLightApp
Vulnerable API for educational purposes
vulnerablevulnerable-web-appvulnerable-apihackingpentestapivulnerabilitiesvulnerabilityvulnerability-researchvulnerable-applicationvulnerable-applicationsvulnerable-web-applicationcybersecurity-educationdotneteducational-projecthacking-codehacking-competitionsvulnerable-serverweb-apihacking-challengeLanguage:C# 6wishtack / wishtack-websheep
⛔️deprecated and replaced by https://github.com/marmicode/websheep
Language:JavaScript 6yusufarbc / DockerVuln
A TUI enviorment for vulnerable app containers.
Language:Shell 4bocajspear1 / mlprtc
A very vulnerable "medical" web app. Just look at the name.
Language:PHP 3manuelz120 / extremely-vulnerable-flask-app
Intentionally vulnerable Python / Flask application, built for educational purposes.
Language:Python 3qwqoro / Mail-Injection
📧 [Research] E-Mail Injection: Vulnerable applications
Language:HTML 3A really cool community web application... that's vulnerable (Made for CNY Hackathon 2019)
Language:PHP 2DotDotSlashRepo / vulnrestdocker
Vulnerable REST based PHP webservice deployed in Docker
Language:CSS 2jib1337 / websandbox
Small forum website for practicing basic web exploits.
Language:PHP 2knightr1d3r007 / OWASP_IOTgoat_for_A5-V11_mini_router
IOTgoat is a vulnerable firmware made by the OWASP project. This is a custom made version of the 'IOTgoat firmware' built for the A5-V11 mini 3G router. This branch brings back the vulnerable IOT firmware back to a real IOT device, for a more realistic experience of IOT device exploitation on a budget.
r888800009 / vulnerable-cgi-login-example
A buffer overflow vulnerable CGI program
Language:C 2sanogotech / Vulnerable-Flask-App
Erlik 2 - Vulnerable-Flask-App
Language:Python 2- Language:Python 2
TheStarkster / Vulnerable-Operations
A Website with vulnerabilities
Language:PHP 2UsagiB4 / Vulnerable-Machines-for-Pentesting-and-Hacking
This is a collection of vulnerable machines that can help you to learn hacking, pentesting and bug hunting. I know there are a lot of lists out there, but most of them are not updated regularly. So I decided to make on myself. Hope this will help you
viorage / OWASP-Juice-Shop
Bash script to install docker and OWASPs juice-shop vulnerable webapp. Run this and browse to http://localhost:3000
Language:Shell 2wwt9829 / CSEC-380-Project
Vulnerable web application created by students using Travis CI, Docker, Flask, and Agile
Language:Python 2Hritikpatel / InsecureTrust_Bank
"InsecureTrust_Bank: Educational repo demonstrating web app vulnerabilities like SQL injection & XSS for security awareness. Use responsibly.
Language:PHP 1
