
BLT
Monorepo of OWASP Bug Logging Tool projects: crowd-sourced vulnerability reporting, bug bounty workflows, CVE namespace, autopatching, and security…

Monorepo of OWASP Bug Logging Tool projects: crowd-sourced vulnerability reporting, bug bounty workflows, CVE namespace, autopatching, and security…

Web and mobile application security training platform

Reproduction pack and PoC script for CVE-2026-52782, an authenticated IDOR in OpenProject project storage settings that hijacks Nextcloud/OneDrive…

Proof-of-concept code for CVE-2026-109618 and CVE-2026-109619 (php2shell bypass), packaged for authorized lab reproduction and vulnerability research.

红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool

Educational CVE proof-of-concept collection targeting WordPress vulnerabilities, with setup scripts and lab guidance for authorized security research…

Proof-of-concept and research material for CVE-2026-59265, a LibreOffice and OpenOffice vulnerability, intended for authorized lab testing and…

Educational proof-of-concept repository for CVE-2026-63277, providing vulnerability research material and lab-safe testing guidance for authorized…

Proof-of-concept and educational research repository for CVE-2026-96940, providing vulnerability details and lab-safe testing guidance for authorized…

Educational security research repository for CVE-2026-10817, providing proof-of-concept material and lab guidance for authorized vulnerability…

Educational security research repository for CVE-2025-9974, providing vulnerability awareness material and authorized lab guidance for controlled…

Educational security research repository documenting CVE-2026-65660 with setup guidance for authorized lab testing and vulnerability awareness.

Using Struts2 and PowerShell to recreate CVE-2017-5638 OGNL Injection vulnerability.

⚠️ This repo is no longer in use. Please refer to https://github.com/OWASP/www-project-vulnerable-web-applications-directory

OWASP hands-on Android security training lab with 78 MASVS/MASTG modules pairing vulnerable, secure, and attacker apps to demonstrate mobile…

Educational CVE research repository for CVE-2026-94545, providing proof-of-concept material and lab guidance for authorized vulnerability analysis…

Intentionally vulnerable banking platform for practicing web application, API, and AI/LLM security testing, secure code review, and DevSecOps…