vulnerable-apps

A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.

Damn Vulnerable NodeJS Application

Intentionally Vulnerable Serverless Functions to understand the specifics of Serverless Security Vulnerabilities

A simple PHP application to learn SQL Injection detection and exploitation techniques.

Capture the flag challenges

gRPC Goat is a "Vulnerable by Design" lab created to provide an interactive, hands-on playground for learning and practicing gRPC security.

Bash script to manage insecure web apps using docker and hosts aliases for pentest practice

Deliberately vulnerable REST API for OWASP Top 10 (2023) security testing and learning.

AzureGenerat0r, a tool for automated generation and configuration of test environments in Microsoft Azure

Vulnerable Shopping Cart is insecure e-commerce application designed for cybersecurity education and penetration testing practice.

A very silly vulnerable application to review your knowledge about basics of cybersecurity.

Web and mobile application security training platform

A multi-industry vulnerable attack surface with 450+ real API endpoints and 12 web apps

Simple Spring/Java web application for Fortify demonstrations

Dataset with 54k vulnerable ELF executables, compiled from C sources and targetting i386 🗂️

Insecure Web Application - .NET version

Java Sample

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

Repository for code, PoCs and others for "Security development for Muggles"

Insecure Web Application - Java version