ScaleSec / vulnadoLinks
Purposely vulnerable Java application to help lead secure coding workshops
☆182Updated last year
Alternatives and similar repositories for vulnado
Users that are interested in vulnado are comparing it to the libraries listed below
Sorting:
- Damn Vulnerable Java (EE) Application☆139Updated last year
- A step-by-step walkthrough of CloudGoat 2.0 scenarios.☆134Updated 5 years ago
- The Pixi module is a MEAN Stack web app with wildly insecure APIs!☆126Updated 2 years ago
- Damn Vulnerable Cloud Application☆193Updated 6 years ago
- Some good resources for getting started with application security☆142Updated 4 years ago
- vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.☆316Updated last year
- PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams☆105Updated 4 months ago
- Enhanced fork with logging, OpenAPI 3.0 and Python 3 for security monitoring workshops☆42Updated last year
- ☆196Updated 7 months ago
- Tarpit - A Web application seeded with vulnerabilities, rootkits, backdoors & data leaks☆79Updated 2 years ago
- This repository is in progress, it will keep updating as I come across to new learning materials. Feel free to contribute.☆222Updated 2 years ago
- Damn Vulnerable Python Web App☆172Updated last year
- Awesome information for WebSockets security research☆271Updated 3 years ago
- A tool geared towards pentesting APIs using OpenAPI definitions.☆177Updated 2 years ago
- The OWASP DevSecOps Guideline explains how we can implement a secure pipeline and use best practices and introduce tools that we can use …☆68Updated last year
- A starter secure code review checklist☆182Updated 6 years ago
- Vulnerable Python Application To Learn Secure Development☆111Updated last year
- A small tool to help developers understand a huge set of security requirements from appsec teams☆45Updated 2 years ago
- Repo for all the SKF Docker lab examples☆453Updated 10 months ago
- A Burp Suite Extension for parsing Project Files from the CLI.☆87Updated 8 months ago
- ☆250Updated 11 months ago
- ☆123Updated last year
- Static code analysis tool based on Elasticsearch☆129Updated 4 years ago
- Semgrep rules corresponding to the OWASP ASVS standard☆27Updated 4 years ago
- ☆71Updated 4 years ago
- BurpSuite Extension: A one-stop pen testing checklist and logger tool☆266Updated 2 years ago
- Burp Automator - A Burp Suite Automation Tool. It provides a high level CLI and Python interfaces to Burp Suite scanner and can be used t…☆199Updated 3 weeks ago
- Workshop on Template Injection (6 exercises) covering Twig, Jinja2, Tornado, Velocity and Freemaker engines.☆127Updated 2 years ago
- GCP GOAT is the vulnerable application for learn the GCP Security☆64Updated last month
- The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.☆108Updated last year