The Pixi module is a MEAN Stack web app with wildly insecure APIs!
☆142Dec 22, 2022Updated 3 years ago
Alternatives and similar repositories for Pixi
Users that are interested in Pixi are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 🐑 Websheep is an app based on a willingly vulnerable ReSTful APIs.☆59Mar 25, 2024Updated 2 years ago
- ☆91May 1, 2023Updated 3 years ago
- A simple Node.js Express REST app with some OWASP vulnerabilities.☆28May 14, 2026Updated 5 months ago
- Damn Vulnerable Web Services is a vulnerable application with a web service and an API that can be used to learn about webservices/API re…☆522Oct 25, 2026Updated last week
- A very vulnerable implementation of a GraphQL API.☆63Nov 12, 2021Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- completely ridiculous API (crAPI)☆1,623Sep 9, 2026Updated last month
- Intentionaly very vulnerable API with bonus bad coding practices☆55Sep 25, 2026Updated last month
- CI Pipeline with Pixi, the WAF OWASP Core Rule Set and TestCafe tests.☆15Jun 9, 2021Updated 5 years ago
- Vulnerable REST API with OWASP top 10 vulnerabilities for security testing☆1,343Apr 7, 2026Updated 6 months ago
- ☆442Aug 13, 2022Updated 4 years ago
- Kubernetes Security Testing Guide☆28Apr 22, 2024Updated 2 years ago
- Vulnerable API☆428Mar 4, 2023Updated 3 years ago
- Penetration Testing Lab☆31Jul 17, 2014Updated 12 years ago
- An example of a mis-configured Rails application release under MIT license.☆21Jan 19, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.☆1,354Jan 10, 2025Updated last year
- Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practis…☆1,718May 24, 2025Updated last year
- OWASP practice lab, just a few copy/pastes away. Fully stacked and ready to go with Docker☆23Oct 13, 2018Updated 8 years ago
- This is vulnerable microservice written in many language to demonstrating OWASP API Top Security Risk (under development)☆49Feb 2, 2023Updated 3 years ago
- An intentionally designed broken web application based on REST API☆13May 25, 2022Updated 4 years ago
- Semgrep rules to identify GWT attack surface☆12Apr 28, 2022Updated 4 years ago
- Contextual Content Discovery Tool☆3,293Jul 10, 2026Updated 3 months ago
- A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Sec…☆339Jun 10, 2026Updated 4 months ago
- This lab is created to demonstrate pass-the-hash, blind sql and SSTI vulnerabilities☆95Jun 11, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This repository contains an example Python API that is vulnerable to several different web API attacks.☆27Feb 1, 2019Updated 7 years ago
- ☆25Mar 28, 2018Updated 8 years ago
- A intentionally vulnerable API and front end, written in Javascript. Adopt a crAPIbara today!☆18Sep 20, 2026Updated last month
- A multi-processed, multi-threaded scanner to discover web directories on multiple URLs.☆21Nov 15, 2019Updated 6 years ago
- Labs from our workshop "Demystifying the server-side".☆18May 30, 2022Updated 4 years ago
- Plattform to develop and experiment with existing java web attacks.☆32Jan 8, 2018Updated 8 years ago
- Content for OWASP Summit 2017 site☆129Nov 12, 2020Updated 5 years ago
- Short and simple vulnerable PHP web application that naïve scanners found to be perfectly safe☆14Dec 4, 2015Updated 10 years ago
- A Burp extension to show the Collaborator client in a tab☆36Dec 23, 2022Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Extract metadata with SSRF (Server-Side Request Forgery)☆16Jul 23, 2022Updated 4 years ago
- Damn Vulnerable Thick Client App☆157Jun 21, 2026Updated 4 months ago
- Ansible module for OWASP ZAP using Python API to scan web targets for security issues☆15Dec 3, 2017Updated 8 years ago
- Proof-of-concept CORS exploitation tool.☆35Sep 7, 2019Updated 7 years ago
- Collection of generic social engineering payloads☆11Sep 20, 2016Updated 10 years ago
- A wordlist of API names for web application assessments☆944Jun 17, 2025Updated last year
- Convert HTTP requests into API spec☆14Feb 14, 2026Updated 8 months ago