supersteelblue Goto Github PK

altoroj

WARNING: This app contains security vulnerabilities. AltoroJ is a sample banking J2EE web application. It shows what happens when web applications are written with consideration of app functionality but not app security. It's a simple and uncluttered platform for demonstrating and learning more about real-life application security issues.

bodgeit

The BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing.

commix-testbed

A collection of web pages, vulnerable to command injection flaws.

cryptomg

CryptOMG is a configurable CTF style test bed that highlights common flaws in cryptographic implementations.

damn-vulnerable-redis-container

An example of obtaining RCE via Redis and CSRF

docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

dvna

Damn Vulnerable NodeJS Application

environment-scowlcake-production

environment-scowlcake-staging

groovygoat

POC for dynamic groovy/thymeleaf based lesson system

hackazon

A modern vulnerable web app

igoat

OWASP iGoat - A Deliberately Insecure iOS Application by Swaroop Yermalkar

java-goof

javasecurity

Java web and command line application projects for different security topics

javavulnerablelab

Vulnerable Java based Web Application

jquery-tiny-pubsub

A really, really, REALLY tiny pub/sub implementation for jQuery.

js-vuln-db

A collection of JavaScript engine CVEs with PoCs

juice-shop

OWASP Juice Shop is an intentionally insecure webapp for security trainings written entirely in Javascript which encompasses the entire OWASP Top Ten and other severe security flaws.

keywhiz

A system for distributing and managing secrets

leastauthority.com

Least Authority S4

lets-be-bad-guys

A deliberately-vulnerable website and exercises for teaching about the OWASP Top 10

moneyx

MoneyX is an intentionally vulnerable JSP application used for training developers in application security concepts.

node-hack

A vulnerable nodejs application for hollywood-style hacking demos

node.nv

Intentionally Vulnerable node.js application

nodegoat

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

owasp-faux-bank-classicasp

A proof of concept project that demonstrates oWASP.org's top 10 web vulnerabilities

owaspwebgoatphp

railsgoat

A vulnerable version of Rails that follows the OWASP Top 10

sentineltestbed

Vulnerable web site. Used to test sentinel features.

sqli-labs

SQLI labs to test error based, Blind boolean based, Time based.