A deliberately vulnerable web application for learning web application security.
☆159Apr 28, 2025Updated last year
Alternatives and similar repositories for OWASPWebGoatPHP
Users that are interested in OWASPWebGoatPHP are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- OWASP GoatDroid is a fully functional and self-contained training environment for educating developers and testers on Android security. G…☆28Sep 25, 2012Updated 13 years ago
- OWASP WebGoat.NET☆73Aug 20, 2015Updated 10 years ago
- OWASP Findings Format☆19Mar 4, 2021Updated 5 years ago
- OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS☆451Dec 29, 2025Updated 7 months ago
- Repository for OWASP Code Review document☆17Jun 24, 2014Updated 12 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- This repo is no longer in use. Please refer to https://github.com/OWASP/www-project-vulnerable-web-applications-directory☆886Jul 20, 2026Updated 3 weeks ago
- Vulnerable web site. Used to test sentinel features.☆11Nov 18, 2016Updated 9 years ago
- The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Nod…☆2,060Jun 15, 2024Updated 2 years ago
- Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner☆12Apr 22, 2018Updated 8 years ago
- Simple mind maps for IoT security attack surfaces and methodologies☆17Aug 12, 2019Updated 6 years ago
- OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar☆461Jan 5, 2023Updated 3 years ago
- Vulnerable Python Application To Learn Secure Development☆128May 31, 2024Updated 2 years ago
- *This project is no longer maintained* OWASP GoatDroid is a fully functional and self-contained training environment for educating develo…☆256Jul 29, 2014Updated 12 years ago
- Encoder, Decoder, Converter, Calculator, TU WAS DU WILLST .. for various codings used in the wild wide web☆41Jul 3, 2024Updated 2 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- OWASP Foundation Web Respository☆20Oct 8, 2025Updated 10 months ago
- A vulnerable LDAP based web app written in Golang☆83Oct 31, 2023Updated 2 years ago
- Priv8 Tools Offensive Security WordPress_AutoExploiter☆29Apr 17, 2022Updated 4 years ago
- The Last Web Recon Tool You'll Need☆17Nov 7, 2020Updated 5 years ago
- The MAS Crackmes aka. UnCrackable Apps, a collection of mobile reverse engineering challenges part of the OWASP MAS project.☆33Oct 3, 2022Updated 3 years ago
- LAPSE+ is a security scanner, based on the white box analysis of code for detecting vulnerabilities in Java EE Applications.☆27Feb 2, 2018Updated 8 years ago
- Accepts a domain name and queries multiple sources to return subdomains. Includes option to scan the returned subdomains to check connect…☆14Aug 9, 2019Updated 7 years ago
- This repository holds a target infrastructure you can use for running the nimbostratus tools.☆24Mar 9, 2015Updated 11 years ago
- whois.cynthia.re V2☆14May 23, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- The OWASP Top 5 Machine Learning Risks[edit | edit source] The idea is to build the required resources which help software security comm…☆30Jun 9, 2018Updated 8 years ago
- Proof of concept that uses cosign and GitHub's in built OIDC for actions to sign container images, providing a proof that what is in the …☆14Jan 31, 2023Updated 3 years ago
- an extremely buggy web app !☆46Dec 5, 2016Updated 9 years ago
- OWASp PureCaptcha project☆25Dec 15, 2019Updated 6 years ago
- The OWASP Developer Guide☆2,168Aug 1, 2026Updated last week
- Monitors and curates bug-bounty related repositories weekly (Monday).☆62Aug 3, 2026Updated last week
- Audits AD hashdump and looks for instances for password reuse☆12Nov 12, 2019Updated 6 years ago
- a Damn Vulnerable Serverless Application☆544Sep 12, 2023Updated 2 years ago
- miscellaneous stuff☆21Mar 31, 2015Updated 11 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Wordpress security scanner written in Python☆15Dec 10, 2011Updated 14 years ago
- OWASP PHP Security Project - THIS PROJECT IS INACTIVE AND MAY CONTAIN SECURITY FLAWS☆199Nov 26, 2015Updated 10 years ago
- Connecting WordPress with Cloudflare firewall, protect your WordPress site at DNS level. Automatically create firewall rules to block dan…☆14Aug 27, 2023Updated 2 years ago
- apkfram was written in order to help any mobile penetration testers to identify the Framework used to develop the Android application.☆12Oct 9, 2024Updated last year
- Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin <= 5.7.14 - Unauthenticated SQL Injection☆22Sep 15, 2024Updated last year
- Vulnerable Java based Web Application☆275Aug 2, 2026Updated last week
- Run Capture the Flags and Security Trainings with OWASP WrongSecrets☆55Aug 4, 2026Updated last week