hervecheckmarx Goto Github PK

altoroj

WARNING: This app contains security vulnerabilities. AltoroJ is a sample banking J2EE web application. It shows what happens when web applications are written with consideration of app functionality but not app security. It's a simple and uncluttered platform for demonstrating and learning more about real-life application security issues.

capital

A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Security vulnerabilities within your own API Security CTF.

cxaudit---php-test-app

CxAudit Test Project - False Positive and False Negative Resolution

cxone_dast_scan

damn-vulnerable-bank

Damn Vulnerable Bank is designed to be an intentionally vulnerable android application. This provides an interface to assess your android application security hacking skills.

dast

Checkmarx Dast integration

dast_lab

DAST Authentication LAB

dastapi

dasttest

Testing DAST Engine with CxOne

dvcsharp-api

Damn Vulnerable C# Application (API)

dvhma

Damn Vulnerable Hybrid Mobile App (DVHMA) is an hybrid mobile app (for Android) that intentionally contains vulnerabilities.

dvwa

Damn Vulnerable Web Application (DVWA)

easybuggy4sb

eshoponweb

Sample ASP.NET Core 6.0 reference application, powered by Microsoft, demonstrating a layered application architecture with monolithic deployment model. Download the eBook PDF from docs folder.

goatlin

(aka Kotlin Goat) - an intentionally vulnerable Kotlin application

hackazon

A modern vulnerable web app

injuredandroid

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

jvl

knock

Knock Subdomain Scan

lua-samples

INFORMAL Public sample scripts for Lua scripting in our applications like TLex, tlTerm, tlCorpus, tlDatabase. Also main TLex and tlTerm Lua scripting reference documentation. The Lua scripting language is integrated in many ways into TLex, tlTerm, tlDatabase and is a powerful way for advanced, technical users to extend these applications, for examp

metasploitable3

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

nodegoat

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

owasp-top10-perl

Web Application Security - Good and bad examples in Perl

owaspwebgoatphp

A deliberately vulnerable web application for learning web application security.

sanity-scan

supplychainsecurity

Malicious Packages and Users are infiltrating software around the globe. Examples of Account Takeover, Dependency Confusion, Hacktivism and Chain/Repo-Jacking are being used to infect your software.

terragoat

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

test

vulnerableapp

OWASP VulnerableApp Project: For Security Enthusiasts by Security Enthusiasts.