PENTEST-LAB
pannagkumaar/pentest-labModern cyber range with 50 hands-on challenges across web, API, cloud, AI, and blue-team security tracks. Features guided attack chains, transparent…
ai-securityapi-securityauthentication+8
pannagkumaar/pentest-labModern cyber range with 50 hands-on challenges across web, API, cloud, AI, and blue-team security tracks. Features guided attack chains, transparent…
juice-shop/juice-shopIntentionally vulnerable web application covering OWASP Top 10 vulnerabilities for security training, CTF competitions, and penetration testing…
dolevf/damn-vulnerable-graphql-applicationDamn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL…
prateek147/dvia-v2Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security…
rewanthtammana/damn-vulnerable-bankIntentionally vulnerable Android banking app for practicing mobile security testing, featuring root detection, anti-debugging, SSL pinning, and…
dockersecurityplayground/dspA Microservices-based framework for the study of Network Security and Penetration Test techniques
payatu/tiredful-apiAn intentionally designed broken web application based on REST API.
owasp/dvsaa Damn Vulnerable Serverless Application
nvisium-jack-mannino/owasp-goatdroid-project*This project is no longer maintained* OWASP GoatDroid is a fully functional and self-contained training environment for educating developers and…
tombstoneghost/tiwapDeliberately vulnerable Flask web application with 22 security flaws across 3 difficulty levels for hands-on penetration testing and web security…
commando-x/vuln-bank-mobileA deliberately vulnerable mobile banking application designed for practicing mobile security testing. Features common vulnerabilities found in…
effortlessdevsec/ninjasworkoutDeliberately vulnerable Node.js web application containing 19+ security bugs (XSS, SSRF, Prototype Pollution, RCE) for hands-on penetration testing…
appsecco/dvcsharp-apiDamn Vulnerable C# Application (API)
sobri3195/pegasus-pentest-arsenalA comprehensive web application security testing toolkit that combines 10 powerful penetration testing features into one tool.
theronielanddaronpodcastshow/svjaThe Super Vulnerable Java Application (SVJA), as demonstrated in the Roniel and DaRon Podcast Show, is an Apache Struts application designed to…
amirmuhammadmarvi/network-security-labControlled virtual attack & defense lab — CVE-2011-2523 exploitation, Nmap recon, Nikto scanning, UFW hardening on Metasploitable 2
