secninja96 Goto Github PK

aws-vulnerable-lambda

An AWS Lambda vulnerable application written in flask.

bodgeit

The BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing.

bwa_cyclone_transfers

cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

ctfd

CTFs as you need them

docker-vulnerable-dvwa

Damn Vulnerable Web Application Docker container

dotnet-sample

Setup CI/CD workflow for dotNet sample app using GitHub Actions

dvna

Damn Vulnerable NodeJS Application

dvws-node

Damn Vulnerable Web Services is a vulnerable web service and API that can be used to learn about webservices/API related vulnerabilities.

govwa

iam-vulnerable

Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.

insecureshop

An Intentionally designed Vulnerable Android Application built in Kotlin.

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

kubernetes

Production-Grade Container Scheduling and Management

kubernetes-goat

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

lazyweb

This web application is a demonstration of common server-side application flaws. Each of the vulnerabilities has its own difficulty rating.

mutillidae

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. Mutillidae can be installed on Linux and Windows using LAMP, WAMP, and XAMMP. It is pre-installed on SamuraiWTF and OWASP BWA. The existing version can be updated on these platforms. With dozens of vulnerabilities and hints to help the user; this is an easy-to-use web hacking environment designed for labs, security enthusiast, classrooms, CTF, and vulnerability assessment tool targets. Mutillidae has been used in graduate security courses, corporate web sec training courses, and as an "assess the assessor" target for vulnerability assessment software. A containerized version of the application is available as a companion project.

project-examples

Small projects in universal build ecosystems to configure CI and Artifactory

terraformgoat

TerraformGoat is selefra research lab's "Vulnerable by Design" multi cloud deployment tool.

terragoat

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

vault

A tool for secrets management, encryption as a service, and privileged access management

vulnlab

VulnLab

web-app

A social network for managing projects

webgoat.net

OWASP WebGoat.NET

xvwa

XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.