junghanlee Goto Github PK

awesome-vulnerable

A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.

benchmark

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

bwapp

an extremely buggy web app !

dvja

Damn Vulnerable Java (EE) Application

dvna

Damn Vulnerable NodeJS Application

dvpwa

Damn Vulnerable Python Web App

dvwa

Damn Vulnerable Web Application (DVWA)

ecsdemo-nodejs

Part 3 of a 4 part ECS workshop

gg_test_public_event_repo

gitguardian_poc2

gg_test_repo

gitguardian_POC

kaimonkey

KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.

kube-goat

A deliberately vulnerable Kubernetes cluster

oss2018

Open Security Summit 2018

owaspwebgoatphp

A deliberately vulnerable web application for learning web application security.

shiftleft-go-demo

shiftleft-java-demo

shiftleft-python-demo

shiftleft_test

terraform-aws-secure-baseline

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.

terraform-examples

Simple and idiomatic examples of various Terraform functions and features.

terragoat

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

vulnado

Purposely vulnerable Java application to help lead secure coding workshops

vulnerability-java-samples

Sample exploits of common vulnerabilities in Java librarires

vulnerable-app

A sample web application using Node.js, Express and Angular that is vulnerable to common security vulnerabilities.

vulnerable-node

A very vulnerable web site written in NodeJS with the purpose of have a project with identified vulnerabilities to test the quality of security analyzers tools tools

vulnerable-web-application

OWASP Vulnerable Web Application Project https://github.com/hummingbirdscyber

vulnerableapp

OWASP VulnerableApp Project: For Security Enthusiasts by Security Enthusiasts.

vulpy

Vulnerable Python Application To Learn Secure Development