oss-oopssec-store
koadt/oss-oopssec-storeSecurity training for the apps you actually ship. Open your browser and start hacking.
ai-securityctfeducation+7
42
koadt/oss-oopssec-storeSecurity training for the apps you actually ship. Open your browser and start hacking.
vaibhav91one/log4shell-cve-labIntentionally vulnerable Log4j 2.14.1 HTTP service for hands-on practice with CVE-2021-44228 (Log4Shell) in an isolated sandbox environment.
vaibhav91one/shellshock-cve-labIntentionally vulnerable CGI lab for Shellshock (CVE-2014-6271) with a Python RFC-3875 server and GNU bash 4.2, designed for isolated security…
owasp/pwnzzaiHands-on AI security learning platform with intentionally vulnerable LLM applications. Explore OWASP Top 10 for LLMs through interactive pizza shop…
digininja/dvwaIntentionally vulnerable PHP/MariaDB web application for practicing common web security vulnerabilities across multiple difficulty levels in a legal,…
juice-shop/juice-shopIntentionally vulnerable web application covering OWASP Top 10 vulnerabilities for security training, CTF competitions, and penetration testing…
clickswave/vuln_appsRuns a fleet of intentionally vulnerable web/API apps in isolated Docker stacks for local penetration testing and validating scanner findings with…
commando-x/vuln-bankIntentionally vulnerable banking platform for practicing web application, API, and AI/LLM security testing, secure code review, and DevSecOps…
kpolley/redaiAI-driven vulnerability discovery and live validation
l0lsec/cve-2025-55182-labIntentionally vulnerable Next.js RSC Docker lab for CVE-2025-55182 (React2Shell) local testing
deepankarkumar1/cve-2025-55182_vulnerable-applicationIntentionally vulnerable React Server Components lab for studying CVE-2025-55182. Provides a safe environment for security researchers, developers,…
dolevf/damn-vulnerable-graphql-applicationDamn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL…
portswigger/research-labsThis repository contains a number of insecure self-hosted applications that allows interested security engineers to test vulnerabilities found by…
mbrandner-group/juiceshopglIntentionally vulnerable web application for security training, CTF competitions, and testing security tools. Covers OWASP Top Ten vulnerabilities…
ch4n3-yoon/cve-2024-21520-demoEducational repository demonstrating XSS vulnerabilities in Django Rest Framework applications. Contains intentionally vulnerable code to teach…
sharathc213/cve-2023-7172Intentionally vulnerable Hospital Management System demonstrating SQL injection (CVE-2023-7172) with Docker setup and PoC for educational security…
trailofbits/not-going-anywhereIntentionally vulnerable Golang programs exposing web, gRPC, and database/sql flaws for security training, vulnerability discovery, and remediation…
cberman/cve-2023-2822-demoSimple flask application to implement an intentionally vulnerable web app to demo CVE-2023-2822.