sec642 Goto Github PK

bankservice

Backend vunerable bank service for mobile app

bookmarker

Vulnerable PHP app for Mass Assignment

crazycars

Vulnerable web app with crypto weaknesses

cryptomg

CryptOMG is a configurable CTF style test bed that highlights common flaws in cryptographic implementations.

dataencoding

Vulnerable web app with hashing weaknesses

dojo-basic

evilbank

Vulnerable web app with captcha weaknesses

evilcaptcha

Vulnerable web app with captcha challenge

failpics

Vulnerable web app with URL tamper protection weakness

fileboss

Vulnerable web app with crypto weakness

modsec

Basic app to practice modsec bypass

nodegoat

Older version of nodegoat

nosqlilab

A lab for playing with NoSQL Injection

nosqlinjection_wordlists

This repository contains payload to test NoSQL Injections

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-in-docker

Docker image to exploit RCE, try for pentest methods and test container security solutions (trivy, falco and etc.)

sec642_papers

This repository is a collection of papers used in the course that has been deprecated on the wide internet

sec642_wiki

Template for writing labs in Markdown with emphasis on print and electronic access, style

sockettome

sockettome-1

A lab for security testing web sockets

ssrf-playground

A playground to practice SSRF Attacks against web apps

typejuggler

Vulnerable PHP app to demonstrate type juggling

vulnerable-oauth-2.0-applications

vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.

webservice

Basic vulnerable SOAP webservice