A deliberately vulnerable web application for learning web application security.
☆163Apr 28, 2025Updated last year
Alternatives and similar repositories for OWASPWebGoatPHP
Users that are interested in OWASPWebGoatPHP are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- OWASP ServerlessGoat: a serverless application demonstrating common serverless security flaws☆331Jul 30, 2024Updated 2 years ago
- OWASP WebGoat.NET☆73Aug 20, 2015Updated 11 years ago
- OWASP Findings Format☆19Mar 4, 2021Updated 5 years ago
- OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS☆455Dec 29, 2025Updated 9 months ago
- Vulnerable web site. Used to test sentinel features.☆11Nov 18, 2016Updated 9 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- OWASP Vulnerable Web Application Project https://github.com/hummingbirdscyber☆423Jul 10, 2024Updated 2 years ago
- The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Nod…☆2,075Jun 15, 2024Updated 2 years ago
- Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner☆12Apr 22, 2018Updated 8 years ago
- Simple mind maps for IoT security attack surfaces and methodologies☆17Aug 12, 2019Updated 7 years ago
- Vulnerable Python Application To Learn Secure Development☆129May 31, 2024Updated 2 years ago
- OWASP WebGoat.NET☆258Dec 16, 2023Updated 2 years ago
- *This project is no longer maintained* OWASP GoatDroid is a fully functional and self-contained training environment for educating develo…☆256Jul 29, 2014Updated 12 years ago
- A set of XSS vulnerable PHP scripts for testing☆38Feb 10, 2013Updated 13 years ago
- OWASP Foundation Web Respository☆20Oct 8, 2025Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- A vulnerable LDAP based web app written in Golang☆83Oct 31, 2023Updated 2 years ago
- Priv8 Tools Offensive Security WordPress_AutoExploiter☆29Apr 17, 2022Updated 4 years ago
- The Last Web Recon Tool You'll Need☆17Nov 7, 2020Updated 5 years ago
- ☆11Mar 19, 2022Updated 4 years ago
- LAPSE+ is a security scanner, based on the white box analysis of code for detecting vulnerabilities in Java EE Applications.☆27Feb 2, 2018Updated 8 years ago
- flask-webgoat is a deliberately-vulnerable application written with the Flask web framework.☆19Sep 5, 2025Updated last year
- A honeypot that can be used to observe traffic directed at home routers.☆22Nov 14, 2018Updated 7 years ago
- This repository holds a target infrastructure you can use for running the nimbostratus tools.☆24Mar 9, 2015Updated 11 years ago
- Web and mobile application security training platform☆1,460Updated this week
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- whois.cynthia.re V2☆13May 23, 2021Updated 5 years ago
- Proof of concept that uses cosign and GitHub's in built OIDC for actions to sign container images, providing a proof that what is in the …☆14Jan 31, 2023Updated 3 years ago
- This is a defunct code base. The project is located at: https://github.com/WebGoat☆56Jul 20, 2016Updated 10 years ago
- A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool.☆26Mar 11, 2024Updated 2 years ago
- The OWASP Developer Guide☆2,184Oct 1, 2026Updated last week
- Audits AD hashdump and looks for instances for password reuse☆12Nov 12, 2019Updated 6 years ago
- a Damn Vulnerable Serverless Application☆547Sep 12, 2023Updated 3 years ago
- The OWASP Vulnerable Web Applications Directory Project (VWAD) is a comprehensive and well maintained registry of all known vulnerable we…☆94Jul 27, 2026Updated 2 months ago
- ☆15Oct 23, 2012Updated 13 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- vuln-netframework is a .net-framework 4.7 project that include worst coding practices about common vulnerabilities like Insecure Deserial…☆10Nov 9, 2025Updated 11 months ago
- Website that takes a linkedin URL and generates a pretty HTML resume from it☆16Jun 23, 2016Updated 10 years ago
- Anti-hacking tools deploying configuration for Wordpress☆15May 27, 2020Updated 6 years ago
- Remote Access Tool, Command & Control, based on the github project Ares, but written in python 3 with some extra features.☆38Mar 8, 2021Updated 5 years ago
- ☆20Jan 23, 2020Updated 6 years ago
- Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.☆12Mar 14, 2018Updated 8 years ago
- the metasploit script(POC/EXP) about CVE-2021-22005 VMware vCenter Server contains an arbitrary file upload vulnerability☆22Oct 2, 2021Updated 5 years ago