intentionally-vulnerable

IBM Related Japanese technical documents - Code Patterns, Learning Path, Tutorials, etc.

Vulnerable webapp testbed

SQL injection testbed designed for sqlmap practice (MySQL backend)

Intentionally vulnerable sandbox app for demonstrating AWS agent-based code review, penetration testing, and 5xx incident investigation on ECS Fargate, ALB, DynamoDB, and CloudWatch. Educational, non-production, MIT-0.

Vulnerable REST based PHP webservice deployed in Docker

Intentionally vulnerable JavaScript Code Snippets which are intended to benchmark Static Application Security Testing tools.

VWA (vulnerable web applications) for SSJI, implemented in NodeJS and ExpressJS

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

A modern, intentionally vulnerable iOS app for learning mobile penetration testing.

VaultPay is scaffolded—a modern wallet app with all ten 2024 risks planted and cross-mapped to MASVS v2.1.0.

Intentionally vulnerable GitHub Actions fixtures for Grafter security training

[INTENTIONALLY VULNERABLE - Mithras demo] Programme entitlement and access-token service.

Intentionally vulnerable GitHub Actions fixtures for Grafter security training

A deliberately vulnerable web application exhibiting an unrestricted file upload vulnerability.

A deliberately vulnerable web application exhibiting a simple password exposure vulnerability.

A deliberately vulnerable Flask app: each endpoint wires one source of untrusted data into one risky operation (SQL, shell, file paths, SSRF and more). Under normal Python it is exploitable; under es-python every attack that reaches a sink is reported. Never deploy it.

Intentionally vulnerable GitHub Actions fixtures for Grafter security training

Intentionally vulnerable GitHub Actions fixtures for Grafter security training

GlassHouse is a collection of intentionally vulnerable applications designed to help students, developers, and security professionals learn about common web vulnerabilities, their exploitation, and how to fix them.

Intentionally vulnerable GitHub Actions fixtures for Grafter security training