konduktouser Goto Github PK

altoroj

WARNING: This app contains security vulnerabilities. AltoroJ is a sample banking J2EE web application. It shows what happens when web applications are written with consideration of app functionality but not app security. It's a simple and uncluttered platform for demonstrating and learning more about real-life application security issues.

brokencrystals

A Broken Application - Very Vulnerable!

cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

diwa

A Deliberately Insecure Web Application

dvsa

a Damn Vulnerable Serverless Application

dvwa

Damn Vulnerable Web Application (DVWA)

generic-university

Vulnerable API

govwa

hammer

An example of a mis-configured Rails application release under MIT license.

javavulnerablelab

Vulnerable Java based Web Application

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

kaimonkey

KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.

leaky-repo

Benchmarking repo for secrets scanning

monorepo-example

monorepo example - using Node.js

mutillidae

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. Mutillidae can be installed on Linux and Windows using LAMP, WAMP, and XAMMP. It is pre-installed on SamuraiWTF and OWASP BWA. The existing version can be updated on these platforms. With dozens of vulnerabilities and hints to help the user; this is an easy-to-use web hacking environment designed for labs, security enthusiast, classrooms, CTF, and vulnerability assessment tool targets. Mutillidae has been used in graduate security courses, corporate web sec training courses, and as an "assess the assessor" target for vulnerability assessment software. A containerized version of the application is available as a companion project.

nextjs-monorepo

nodegoat

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

pygoat

intentionally vuln web Application Security in django

railsgoat

A vulnerable version of Rails that follows the OWASP Top 10

reactvuln

deliberately vulnerable react project

sample_secrets

vulnado

Purposely vulnerable Java application to help lead secure coding workshops

vulnerable-flask-app

Vulnerable-Flask-App

vulnerableapp

OWASP VulnerableApp Project: For Security Enthusiasts by Security Enthusiasts.

vulnerableapp-facade

VulnerableApp-facade is probably most modern lightweight distributed farm of Vulnerable Applications built for handling wide range of vulnerabilities across tech stacks.

vulpy

Vulnerable Python Application To Learn Secure Development

wrongsecrets

Vulnerable app with examples showing how to not use secrets