Very Vulnerable Management API (VVMA) is a deliberately insecure RESTful API built with Node.js for educational and testing purposes. It includes vulnerabilities from the OWASP Top 10 API, allowing learners, security professionals, and developers to explore and understand common API security flaws.
☆70Jun 5, 2025Updated last year
Alternatives and similar repositories for VVMA
Users that are interested in VVMA are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A deliberately vulnerable mobile banking application designed for practicing mobile security testing. Features common vulnerabilities fou…☆107Nov 25, 2025Updated 11 months ago
- A simple web app to get the latest EPSS data for a CVE ID☆14Dec 14, 2025Updated 10 months ago
- 🦋 Glasswing — See through Flutter's TLS. Bypass BoringSSL SSL pinning on Android: static libflutter.so patching + Frida runtime hooks. N…☆23Oct 18, 2026Updated 2 weeks ago
- HackList: Your go-to AI-powered guide to hands-on cybersecurity learning!☆24Jul 6, 2025Updated last year
- Linux Space Booster is an advanced, secure disk space cleanup utility specifically designed for Linux virtual machines. It intelligently …☆18Jun 15, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Find credentials and secret with 170+ rules covering across source code, Web URL, and CI/CD, verifies them against vendor APIs, and gene…☆124Sep 16, 2026Updated last month
- A powerful Burp Suite extension that imports Postman collections☆33Aug 1, 2025Updated last year
- ☆97Apr 4, 2025Updated last year
- Zero trust. Zero security. Total exposure. A deliberately vulnerable health tech platform with AI Chatbot for learning about application …☆49Mar 27, 2026Updated 7 months ago
- ☆14Oct 10, 2026Updated 3 weeks ago
- A cross-platform desktop application for HTTP/HTTPS traffic interception and analysis, built with Go. Features modern UI, traffic manipul…☆224Apr 28, 2025Updated last year
- DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will auto…☆16Apr 2, 2026Updated 7 months ago
- This is my personal repo, which includes bug bounty tips, a collection of tools, one-liners, and other resources I personally prefer whil…☆70Apr 25, 2025Updated last year
- ☆11Dec 22, 2025Updated 10 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Penstaller: A Python tool to automate the installation of essential bug bounty and pentesting tools. With one command, it sets up tools f…☆20Mar 14, 2025Updated last year
- A modern tool written in python for hunting open redirection☆31Aug 8, 2023Updated 3 years ago
- Kubernetes Enumeration Tools for Penetration Testing - K8s security assessment scripts for red team operations☆17Apr 17, 2026Updated 6 months ago
- List of robotics companies/organizations in Africa☆14Jun 19, 2025Updated last year
- CTF Helper is a powerful, modular Command Line Interface (CLI) tool designed for Capture The Flag (CTF) competitions and cybersecurity ta…☆35Oct 30, 2026Updated last week
- Modules designed to be used with the Conquest framework.☆22Sep 3, 2026Updated 2 months ago
- My notes while studying for the PNPT from TCM Security.☆86Mar 30, 2024Updated 2 years ago
- You can gather useful information accounts by username across all types networks ( which also include social media)☆31Oct 19, 2023Updated 3 years ago
- 🔍 erroreyes – Lightweight Subdomain Enumeration Tool A Python-based tool that queries crt.sh certificate logs to discover subdomains ass…☆17May 8, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Repository for public artifacts related to the practice of secure code review☆12Nov 13, 2019Updated 6 years ago
- ☆12Jun 13, 2025Updated last year
- An Android app to easily manage Frida server on your device or emulator☆145Jan 3, 2026Updated 10 months ago
- Tools that can be useful for OSEP exam and PEN300 studies.☆98Mar 14, 2026Updated 7 months ago
- AprilTag is a visual fiducial system popular for robotics research.☆12Jun 23, 2024Updated 2 years ago
- ☆11Sep 15, 2024Updated 2 years ago
- Alya Bot is a Telegram bot designed with the persona of Alya, a waifu character from the "Roshidere" (The Angel Next Door Spoils Me Rotte…☆12Apr 16, 2026Updated 6 months ago
- Performs a global AMSI bypass by patching amsi.dll in memory.☆22Updated this week
- Testing tools for Oracle Forms☆16Oct 23, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Defcon 28 - Red Team Village - Applied Purple Teaming - Why Can't We Be Friends☆26Aug 9, 2020Updated 6 years ago
- Collection of Notes and CheatSheets used for Red teaming Certs☆506Feb 13, 2023Updated 3 years ago
- These are installation notes based on Mayfly's installation notes. They are more streamlined for Vagrant as I did not take the Docker rou…☆28Jun 19, 2024Updated 2 years ago
- crack and generate jwt with ease☆24Mar 23, 2025Updated last year
- This is an advanced ASMI bypass that is currently undetected by Windows Defender and all the Antivirus software's on virustotal.☆28Jun 10, 2025Updated last year
- MongoDB CVE-2025-14847 Heap Memory Leak Scanner | OP_COMPRESSED zlib Vulnerability | Bug Bounty & Red Team Tool☆36Dec 28, 2025Updated 10 months ago
- Patchless AMSI + ETW bypass via PAGE_GUARD exceptions and Vectored Exception Handler (VEH)☆17Mar 24, 2026Updated 7 months ago