vulnerable-web-app
There are 11 repositories under vulnerable-web-app topic.
OWASP / wrongsecrets
Vulnerable app with examples showing how to not use secrets
Language:Java 1367- VAmPILanguage:Python 1041
:warning: This repo is no longer in use. Please refer to https://github.com/OWASP/www-project-vulnerable-web-applications-directory
OWASP Vulnerable Web Application Project https://github.com/hummingbirdscyber
Language:PHP 396Checkmarx / capital
A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Security vulnerabilities within your own API Security CTF.
Language:CSS 304- UnSAFE_Bank
lucideus-repo / UnSAFE_Bank
Vulnerable Banking Suite
Language:PHP 166 - template-injection-workshop
GoSecure / template-injection-workshop
Workshop on Template Injection (6 exercises) covering Twig, Jinja2, Tornado, Velocity and Freemaker engines.
Language:CSS 128 appsecco / sqlinjection-training-app
A simple PHP application to learn SQL Injection detection and exploitation techniques.
Language:PHP 123lunasec-io / Spring4Shell-POC
This is a dockerized application that is vulnerable to the Spring4Shell vulnerability (CVE-2022-22965).
Language:Python 107The OWASP Vulnerable Web Applications Directory Project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.
Language:HTML 67- VulnerableLightApp
Aif4thah / VulnerableLightApp
Vulnerable API for research and education
Language:C# 47 aligorithm / Zero-Health
Zero trust. Zero security. Total exposure. A deliberately vulnerable health tech platform with AI Chatbot for learning about application security and ethical hacking. It contains vulnerabilities from OWASP top 10 Web, API and AI/LLM Security Vulnerabilities. Highly vulnerable, never use in production.
Language:JavaScript 27TheTwitchy / vulnd_xxe
A server vulnerable to XXE that can be used to test payloads using the xxer tool.
Language:Java 26dev-angelist / WebSafeHub---Vulnerable-Web-App
WebSafeHub - Vulnerable Web App
Language:PHP 22qwqoro / Mail-Injection
📧 [Research] E-Mail Injection: Vulnerable applications
Language:HTML 18karimtariqx / HackerStories
This project is a vulnerable web application to practice on. It is designed for educational purposes to help security enthusiasts and developers understand and mitigate common web vulnerabilities.
Language:PHP 17OSTEsayed / OSTE-Vulnerable-Web-Application
Vulnerable Web application made with PHP/SQL designed to help new web testers gain some experience and test DAST tools for identifying web vulnerabilities. Containing some of the most well-known vulnerabilities such as SQL, cross-site scripting (XSS), OS command injections, our intention to expand more vulnerabilities for learning purposes.
Language:PHP 15OWASP Foundation Web Respository
Language:HTML 14- vfapi
naryal2580 / vfapi
Vulnerable FastAPI in reference to Opensource Web Application Security Project (OWASP) TOP 10: 2021
Language:Python 13 - Language:JavaScript 9
UsagiB4 / Vulnerable-Machines-for-Pentesting-and-Hacking
This is a collection of vulnerable machines that can help you to learn hacking, pentesting and bug hunting. I know there are a lot of lists out there, but most of them are not updated regularly. So I decided to make on myself. Hope this will help you
Serhatcck / server-side-prototype-pollution
A website developed with Nodejs. This website includes server side prototype pollution vulnerability
Language:CSS 8anotherik / ThreatByte
ThreatByte is a vulnerable Python (Flask) web application designed to demonstrate some Web Application and API Security risks.
Language:Python 6firdauskhairuddin / lekir-docker
LEKIR - Vulnerable by design to help people learn about common web security, dockerized!
Language:Dockerfile 6manuelz120 / extremely-vulnerable-flask-app
Intentionally vulnerable Python / Flask application, built for educational purposes.
Language:Python 6wishtack / wishtack-websheep
⛔️deprecated and replaced by https://github.com/marmicode/websheep
Language:JavaScript 6cerberauth / api-vulns-challenges
Provide a collection of deliberately vulnerable APIs along with corresponding challenges to help enhancing their skills in identifying, exploiting, and securing API vulnerabilities.
Language:Go 5Hritikpatel / InsecureTrust_Bank
"InsecureTrust_Bank: Educational repo demonstrating web app vulnerabilities like SQL injection & XSS for security awareness. Use responsibly.
Language:PHP 5sanogotech / Vulnerable-Flask-App
Erlik 2 - Vulnerable-Flask-App
Language:Python 4yusufarbc / DockerVuln
A TUI enviorment for vulnerable app containers.
Language:Shell 4jib1337 / websandbox
Small forum website for practicing basic web exploits.
Language:PHP 3knightr1d3r007 / OWASP_IOTgoat_for_A5-V11_mini_router
IOTgoat is a vulnerable firmware made by the OWASP project. This is a custom made version of the 'IOTgoat firmware' built for the A5-V11 mini 3G router. This branch brings back the vulnerable IOT firmware back to a real IOT device, for a more realistic experience of IOT device exploitation on a budget.
Snbig / Vulnerable-Pages
Intentionally Vulnerable Pages for OWASP ASVS Security Evaluation Templates with Nuclei Project. https://snbig.github.io/Vulnerable-Pages/
Language:Python 3- Language:Python 3
Zeeyad-Sayed / Z-Vulnerable-Website-Project
Z-Vulnerable-Website-Project (ZVP for short) is a project where I try to create a custom vulnerable website for learning and demonstrating common web security flaws.
Language:PHP 2
