timothyjxhn/deliberatelyvulnerablewebappA Deliberately Vulnerable Web Application built on Struts 2 (CVE-2017-5638) and Log4J (CVE-2021-44228) for testing and demonstration of OWASP Top 10…
webgoat/webgoatDeliberately vulnerable web application with interactive lessons and challenges for learning web application security and penetration testing…
adeyosemanputra/pygoatintentionally vuln web Application Security in django
tegal1337/0l4bsCross-site scripting labs for web application security enthusiasts
owasp/owaspwebgoatphpA deliberately vulnerable web application for learning web application security.
sobri3195/pegasus-pentest-arsenalA comprehensive web application security testing toolkit that combines 10 powerful penetration testing features into one tool.
mehedi-hasan-sami98/dvwa-zap-pentestWeb application security assessment of DVWA using OWASP ZAP — vulnerability scanning, RCE (CVE-2012-1823) analysis, and remediation report.
owasp/mimosaOpen-source web application security challenge platform with auto-approved registration, SQL dump generation, and Docker deployment for hands-on…
fportantier/vulpyVulnerable Python Application To Learn Secure Development
ransomleak/training-application-securityInteractive secure coding training with hands-on SCORM exercises covering OWASP Top 10 web and API vulnerabilities, Git/secrets exposure, and…
syn-4ck/wvctfWVCTF or WebVulnCTF is a gamified web platform which promotes training in pentesting and web application development security in an entertaining way.…
mbrandner-group/juiceshopglIntentionally vulnerable web application for security training, CTF competitions, and testing security tools. Covers OWASP Top Ten vulnerabilities…
tombstoneghost/tiwapDeliberately vulnerable Flask web application with 22 security flaws across 3 difficulty levels for hands-on penetration testing and web security…
owasp/securityshepherdWeb and mobile application security training platform
effortlessdevsec/ninjasworkoutDeliberately vulnerable Node.js web application containing 19+ security bugs (XSS, SSRF, Prototype Pollution, RCE) for hands-on penetration testing…
mindpatch/simple-mavenDeliberately vulnerable C# API application for practicing web application exploitation and security testing. Includes Docker setup and documentation…
digininja/dvwaIntentionally vulnerable PHP/MariaDB web application for practicing common web security vulnerabilities across multiple difficulty levels in a legal,…
mbrandner-group/webgoat.netDeliberately vulnerable .NET web application for learning common web security flaws through hands-on exercises covering XSS, SQL injection, and other…
