nathan-snyk Goto Github PK

altoroj

WARNING: This app contains security vulnerabilities. AltoroJ is a sample banking J2EE web application. It shows what happens when web applications are written with consideration of app functionality but not app security. It's a simple and uncluttered platform for demonstrating and learning more about real-life application security issues.

benchmarkjava

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

c-goof

Vulnerable C++ project

chatserverapp

cocoapods-many-top-level-vulns

corretto-docker

Dockerfiles for Amazon Corretto Official images.

cors-vulnerable-lab

Sample vulnerable code and its exploit code

docker-goof

A demo repo showcasing Snyk's Docker offering

dotnet-goof

dotnet-xml-goof

dvpwa

Damn Vulnerable Python Web App

dvwa

Damn Vulnerable Web Application (DVWA)

firing-range

go-goof

goatlin

(aka Kotlin Goat) - an intentionally vulnerable Kotlin application

goof

govwa

helloshiftleft-scala

iac-scan-examples

Some basic Infrastructure-as-Code examples to accompany blogs

igoat-swift

OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS

insecure-coding-examples

Code examples for the talk Secure Coding Practices in C++

insecureshop

An Intentionally designed Vulnerable Android Application built in Kotlin.

intentionally-vulnerable-golang-project

This is a project we created that has dependencies with vulnerabilities, for us to test out nancy

java-goof

java-reachability-playground

Intentionally vulnerable repository for demonstration of reachability features

javaspringvulny

javaspringvulny

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

kotlin-multi-project

leaky-angular

A deilberately vulnerable angular app for educational purposes

monorepo_demo

CLI and build-time tool to find & fix known vulnerabilities in open-source dependencies