vulnerable-web-app
There are 11 repositories under vulnerable-web-app topic.
OWASP / wrongsecrets
Vulnerable app with examples showing how to not use secrets
Language:Java 1203- VAmPILanguage:Python 894
The OWASP Vulnerable Web Applications Directory project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.
OWASP Vulnerable Web Application Project https://github.com/hummingbirdscyber
Language:PHP 345Checkmarx / capital
A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Security vulnerabilities within your own API Security CTF.
Language:CSS 270- UnSAFE_Bank
lucideus-repo / UnSAFE_Bank
Vulnerable Banking Suite
Language:PHP 149 - template-injection-workshop
GoSecure / template-injection-workshop
Workshop on Template Injection (6 exercises) covering Twig, Jinja2, Tornado, Velocity and Freemaker engines.
Language:CSS 119 lunasec-io / Spring4Shell-POC
This is a dockerized application that is vulnerable to the Spring4Shell vulnerability (CVE-2022-22965).
Language:Python 104appsecco / sqlinjection-training-app
A simple PHP application to learn SQL Injection detection and exploitation techniques.
Language:PHP 96TheTwitchy / vulnd_xxe
A server vulnerable to XXE that can be used to test payloads using the xxer tool.
Language:Java 25- VulnerableLightApp
Aif4thah / VulnerableLightApp
Vulnerable API for educational purposes
vulnerablevulnerable-web-appvulnerable-apihackingpentestapivulnerabilitiesvulnerabilityvulnerability-researchvulnerable-applicationvulnerable-applicationsvulnerable-web-applicationcybersecurity-educationdotneteducational-projecthacking-competitionsvulnerable-serverweb-apihacking-challengeowasp-top-10Language:C# 24 The OWASP Vulnerable Web Applications Directory (VWAD) Project - OWASP Web Site
Language:HTML 18karimtariqx / HackerStories
This project is a vulnerable web application to practice on. It is designed for educational purposes to help security enthusiasts and developers understand and mitigate common web vulnerabilities.
Language:PHP 16OWASP Foundation Web Respository
Language:HTML 13qwqoro / Mail-Injection
📧 [Research] E-Mail Injection: Vulnerable applications
Language:HTML 11- vfapi
naryal2580 / vfapi
Vulnerable FastAPI in reference to Opensource Web Application Security Project (OWASP) TOP 10: 2021
Language:Python 9 OSTEsayed / OSTE-Vulnerable-Web-Application
Vulnerable Web application made with PHP/SQL designed to help new web testers gain some experience and test DAST tools for identifying web vulnerabilities. Containing some of the most well-known vulnerabilities such as SQL, cross-site scripting (XSS), OS command injections, our intention to expand more vulnerabilities for learning purposes.
Language:PHP 9- Language:JavaScript 8
UsagiB4 / Vulnerable-Machines-for-Pentesting-and-Hacking
This is a collection of vulnerable machines that can help you to learn hacking, pentesting and bug hunting. I know there are a lot of lists out there, but most of them are not updated regularly. So I decided to make on myself. Hope this will help you
Serhatcck / server-side-prototype-pollution
A website developed with Nodejs. This website includes server side prototype pollution vulnerability
Language:CSS 6wishtack / wishtack-websheep
⛔️deprecated and replaced by https://github.com/marmicode/websheep
Language:JavaScript 6sanogotech / Vulnerable-Flask-App
Erlik 2 - Vulnerable-Flask-App
Language:Python 4yusufarbc / DockerVuln
A TUI enviorment for vulnerable app containers.
Language:Shell 4anotherik / ThreatByte
ThreatByte is a vulnerable Python (Flask) web application designed to demonstrate some Web Application and API Security risks.
Language:Python 3bocajspear1 / mlprtc
A very vulnerable "medical" web app. Just look at the name.
Language:PHP 3jib1337 / websandbox
Small forum website for practicing basic web exploits.
Language:PHP 3manuelz120 / extremely-vulnerable-flask-app
Intentionally vulnerable Python / Flask application, built for educational purposes.
Language:Python 3cerberauth / api-vulns-challenges
Provide a collection of deliberately vulnerable APIs along with corresponding challenges to help enhancing their skills in identifying, exploiting, and securing API vulnerabilities.
Language:Go 2DotDotSlashRepo / vulnrestdocker
Vulnerable REST based PHP webservice deployed in Docker
Language:CSS 2firdauskhairuddin / lekir-docker
LEKIR - Vulnerable by design to help people learn about common web security, dockerized!
Language:Dockerfile 2Hritikpatel / InsecureTrust_Bank
"InsecureTrust_Bank: Educational repo demonstrating web app vulnerabilities like SQL injection & XSS for security awareness. Use responsibly.
Language:PHP 2knightr1d3r007 / OWASP_IOTgoat_for_A5-V11_mini_router
IOTgoat is a vulnerable firmware made by the OWASP project. This is a custom made version of the 'IOTgoat firmware' built for the A5-V11 mini 3G router. This branch brings back the vulnerable IOT firmware back to a real IOT device, for a more realistic experience of IOT device exploitation on a budget.
- Language:Python 2
Snbig / Vulnerable-Pages
Intentionally Vulnerable Pages for OWASP ASVS Security Evaluation Templates with Nuclei Project. https://snbig.github.io/Vulnerable-Pages/
Language:Python 2- Language:Python 2
