ScaleSec / vulnado
Purposely vulnerable Java application to help lead secure coding workshops
☆177Updated 7 months ago
Alternatives and similar repositories for vulnado:
Users that are interested in vulnado are comparing it to the libraries listed below
- Damn Vulnerable Java (EE) Application☆134Updated last year
- The Pixi module is a MEAN Stack web app with wildly insecure APIs!☆120Updated 2 years ago
- ☆180Updated 3 months ago
- Damn Vulnerable Cloud Application☆191Updated 6 years ago
- Some good resources for getting started with application security☆141Updated 3 years ago
- vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.☆309Updated 10 months ago
- A step-by-step walkthrough of CloudGoat 2.0 scenarios.☆135Updated 4 years ago
- materials we hand out☆141Updated last week
- Tarpit - A Web application seeded with vulnerabilities, rootkits, backdoors & data leaks☆78Updated 2 years ago
- Vulnerable Python Application To Learn Secure Development☆99Updated 8 months ago
- A starter secure code review checklist☆180Updated 6 years ago
- Damn Vulnerable Python Web App☆168Updated 9 months ago
- A tool geared towards pentesting APIs using OpenAPI definitions.☆174Updated 2 years ago
- PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams☆101Updated 3 weeks ago
- GraphQL security workshop labs☆102Updated 7 months ago
- Enhanced fork with logging, OpenAPI 3.0 and Python 3 for security monitoring workshops☆42Updated last year
- Hacking and Securing Java☆74Updated 6 years ago
- ☆77Updated 2 years ago
- All Things Bug Bounty☆113Updated 2 years ago
- Unofficial documentation for the great tool Param Miner☆176Updated 2 years ago
- Vulnerable Java based Web Application☆261Updated 8 months ago
- This repository is in progress, it will keep updating as I come across to new learning materials. Feel free to contribute.☆222Updated 2 years ago
- A simple web app with a XXE vulnerability.☆225Updated 3 years ago
- ☆184Updated last year
- Ugly Duckling is a lightweight scanner built specifically for our Crowdsource community to submit proof-of-concept modules☆189Updated 3 years ago
- ☆128Updated 4 years ago
- Stuff done in preparation for AWAE course and OSWE certification☆151Updated 4 years ago
- The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters☆100Updated last year
- The OWASP DevSecOps Guideline explains how we can implement a secure pipeline and use best practices and introduce tools that we can use …☆62Updated 8 months ago
- OWASP Code Review Guide Web Repository☆129Updated 2 years ago