cxdemoco Goto Github PK

altoroj

WARNING: This app contains security vulnerabilities. AltoroJ is a sample banking J2EE web application. It shows what happens when web applications are written with consideration of app functionality but not app security. It's a simple and uncluttered platform for demonstrating and learning more about real-life application security issues.

androgoat

AndroGoat

apex_aalbert_vulnerable_code

Vulnerable Apex Project

capital

A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Security vulnerabilities within your own API Security CTF.

checkmarx-ast-scanner-plugin

Jenkins Plugin for AST

coreobject

Distributed version control + object persistence framework

cors-vulnerable-lab

Sample vulnerable code and its exploit code

cxone_dast_scan

dvia

Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This application covers all the common vulnerabilities found in iOS applications (following OWASP top 10 mo

dvna

Damn Vulnerable NodeJS Application

dvna-1

Damn Vulnerable NodeJS Application

dvwa

Damn Vulnerable Web Application (DVWA)

easybuggy4sb

api security

easybuggy4sb2

EasyBuggy clone build on Spring Boot

injuredandroidaj

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

nodegoat-test

Test project

owasp-goatdroid-project

*This project is no longer maintained* OWASP GoatDroid is a fully functional and self-contained training environment for educating developers and testers on Android security. GoatDroid requires minimal dependencies and is ideal for both Android beginners as well as more advanced users. The project currently includes two applications: FourGoats, a l

rest-controller-test-scan

API

sanity-scan

API Security Vulnerable Project

scary4j

A Proof-Of-Concept for the CVE-2021-44228 vulnerability.

vampi

Vulnerable REST API with OWASP top 10 vulnerabilities for security testing

vapi

vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.

www-project-pygoat

OWASP Pygoat Web Respository