WARNING: This app contains security vulnerabilities. AltoroJ is a sample banking J2EE web application. It shows what happens when web applications are written with consideration of app functionality but not app security. It's a simple and uncluttered platform for demonstrating and learning more about real-life application security issues.
☆305Jul 27, 2026Updated 2 months ago
Alternatives and similar repositories for AltoroJ
Users that are interested in AltoroJ are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Gradle plugin for integrating with HCL AppScan Source☆13Jan 29, 2026Updated 8 months ago
- Maven plugin for integrating with HCL AppScan Source☆11Mar 27, 2026Updated 6 months ago
- a ZAPROXY Addon ActiveScan for detecting SQL injection with more better way.☆20Jun 7, 2026Updated 4 months ago
- Resources I've found helpful for learning computing security.☆14Dec 26, 2019Updated 6 years ago
- A set of AWS resources for testing the Log4Shell vulnerability, deployable with terraform☆11Dec 20, 2021Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Integrate static security testing with HCL AppScan CodeSweep with Github.☆22Apr 16, 2026Updated 5 months ago
- Strengthen your defense against web attacks with Kali Linux and Metasploit☆13Jan 30, 2023Updated 3 years ago
- ☆11Aug 2, 2016Updated 10 years ago
- The official plugin for Codewind on Eclipse Che☆11Aug 13, 2020Updated 6 years ago
- ELK stack for red team logs☆13Oct 30, 2020Updated 5 years ago
- Extension for using OpenAPI Tools in VS Code☆15May 20, 2022Updated 4 years ago
- 12-week Geekwise course on web application security and hardening.☆17Mar 19, 2020Updated 6 years ago
- A deliberately vulnerable java app for educational purposes☆19Mar 4, 2024Updated 2 years ago
- Xss payload for bypassing waf☆20Apr 18, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- autopwn + deployment☆15Apr 13, 2022Updated 4 years ago
- Welcome to the Very Vulnerable Lambda Application repository! This repository contains an intentionally vulnerable serverless applicatio…☆13Oct 6, 2026Updated last week
- F5 BIG-IP unauthenticated remote code execution (RCE) and authentication bypass vulnerability!☆11Oct 30, 2023Updated 2 years ago
- A lightweight Python tool to analyze PCAP files and generate network traffic reports. It detects traffic patterns, security concerns, and…☆19Sep 25, 2024Updated 2 years ago
- Damn Vulnerable Java (EE) Application☆150Jan 23, 2024Updated 2 years ago
- Official write-up for Speed Hack event at POC2017☆13Nov 11, 2017Updated 8 years ago
- OWASP Foundation Web Respository☆11Oct 1, 2026Updated last week
- Subdomain Takeover lab is FREE for everyone. This means here is a legal to takeover Subdomain of this website. Here you'll find more tha…☆24Jan 1, 2025Updated last year
- Orchestron is an Application Vulnerability Management and Correlation Tool.Orchestron helps you solve one key problem "Find and fix vulne…☆31Nov 22, 2022Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- thinkphp5 RCE auto exploit☆11Jun 19, 2019Updated 7 years ago
- Root-me Hall Of Fame dashboard☆14Mar 30, 2023Updated 3 years ago
- A Binary Ninja plugin to disassemble bytecode for PlaidCTF 2020 challenge "That's a Lot of Fish"☆13Apr 19, 2020Updated 6 years ago
- A MAL language that demonstrates the Maven project structure☆23Feb 27, 2026Updated 7 months ago
- C# SDK for SecureAuth IdP API☆11May 31, 2023Updated 3 years ago
- Interactive Editor/Debugger for testing Proxy Auto-Config files. (Deprecated. Use version 2.)☆17Jun 11, 2026Updated 4 months ago
- A ZAPROXY Add-on that allows testing of web application vulnerabilities by recording complex multi-step sequences. You can test applica…☆23May 14, 2025Updated last year
- Python cracker for many time pad (multiple one time pad messages)☆11May 3, 2020Updated 6 years ago
- XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.☆1,763Sep 12, 2020Updated 6 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- go-audit is an alternative to the auditd daemon that ships with many distros☆16Oct 28, 2018Updated 7 years ago
- This repo is no longer in use. Please refer to https://vwad.owasp.org☆882Sep 24, 2026Updated 2 weeks ago
- Measure release insights and recommendations for open-source dependencies. Note: this project is archived.☆10Jan 3, 2023Updated 3 years ago
- The future of the decentralized internet begins with the community [L0]☆10Nov 4, 2017Updated 8 years ago
- ☆11May 15, 2020Updated 6 years ago
- Vulnerable Nodejs — a real shop (NodeBazaar) intentionally full of security bugs. 14 labs, OWASP Top 10:2025, SAST benchmark. Node.js por…☆491Oct 6, 2026Updated last week
- Official repository of the Blackbuntu pentesting distribution☆13Feb 5, 2023Updated 3 years ago