Very Vulnerable Management API (VVMA) is a deliberately insecure RESTful API built with Node.js for educational and testing purposes. It includes vulnerabilities from the OWASP Top 10 API, allowing learners, security professionals, and developers to explore and understand common API security flaws.
☆69Jun 5, 2025Updated last year
Alternatives and similar repositories for VVMA
Users that are interested in VVMA are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Linux Space Booster is an advanced, secure disk space cleanup utility specifically designed for Linux virtual machines. It intelligently …☆17Jun 15, 2025Updated last year
- HuntersEye is designed for Bug Bounty Hunters, and Security Researchers to monitor new subdomains and certificates for specified domains.…☆21Dec 29, 2023Updated 2 years ago
- A powerful Burp Suite extension that imports Postman collections☆33Aug 1, 2025Updated last year
- HackList: Your go-to AI-powered guide to hands-on cybersecurity learning!☆24Jul 6, 2025Updated last year
- Zero trust. Zero security. Total exposure. A deliberately vulnerable health tech platform with AI Chatbot for learning about application …☆49Mar 27, 2026Updated 6 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A deliberately vulnerable mobile banking application designed for practicing mobile security testing. Features common vulnerabilities fou…☆104Nov 25, 2025Updated 10 months ago
- Find credentials and secret with 170+ rules covering across source code, Web URL, and CI/CD, verifies them against vendor APIs, and gene…☆122Sep 16, 2026Updated last month
- DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will auto…☆15Apr 2, 2026Updated 6 months ago
- This is my personal repo, which includes bug bounty tips, a collection of tools, one-liners, and other resources I personally prefer whil…☆69Apr 25, 2025Updated last year
- CyberPreacher cloud project collection☆16Dec 21, 2025Updated 9 months ago
- Proxll is a tool designed to simplify the generation of proxy DLLs while addressing common conflicts related to windows.h☆41Oct 8, 2024Updated 2 years ago
- Learn how to intercept flutter apps☆25Jan 19, 2024Updated 2 years ago
- ☆98Apr 4, 2025Updated last year
- Azure AD (Entra ID) enumeration tool. Find related domains and tenant information in a simple way.☆37Oct 4, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Penstaller: A Python tool to automate the installation of essential bug bounty and pentesting tools. With one command, it sets up tools f…☆20Mar 14, 2025Updated last year
- You can gather useful information accounts by username across all types networks ( which also include social media)☆31Oct 19, 2023Updated 2 years ago
- A deliberately vulnerable banking application designed for practicing Security Testing of Web App, APIs, AI integrated App and secure cod…☆983Sep 22, 2026Updated 3 weeks ago
- CTF Helper is a powerful, modular Command Line Interface (CLI) tool designed for Capture The Flag (CTF) competitions and cybersecurity ta…☆35May 15, 2026Updated 5 months ago
- My notes while studying for the PNPT from TCM Security.☆85Mar 30, 2024Updated 2 years ago
- Performs a global AMSI bypass by patching amsi.dll in memory.☆21Oct 14, 2025Updated last year
- ☆82Apr 28, 2025Updated last year
- Modules designed to be used with the Conquest framework.☆22Sep 3, 2026Updated last month
- Comprehensive AWS cloud reconnaissance and privilege escalation toolkit written in Python. Features IAM, EC2, S3, Lambda, ECS, Secrets Ma…☆50Jul 8, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- AprilTag is a visual fiducial system popular for robotics research.☆12Jun 23, 2024Updated 2 years ago
- Repository for public artifacts related to the practice of secure code review☆12Nov 13, 2019Updated 6 years ago
- Tools that can be useful for OSEP exam and PEN300 studies.☆100Mar 14, 2026Updated 7 months ago
- 🔍 erroreyes – Lightweight Subdomain Enumeration Tool A Python-based tool that queries crt.sh certificate logs to discover subdomains ass…☆17May 8, 2025Updated last year
- crack and generate jwt with ease☆24Mar 23, 2025Updated last year
- Research into Undocumented Behavior of Azure AD Refresh Tokens☆12Oct 27, 2023Updated 2 years ago
- This is an advanced ASMI bypass that is currently undetected by Windows Defender and all the Antivirus software's on virustotal.☆28Jun 10, 2025Updated last year
- These are installation notes based on Mayfly's installation notes. They are more streamlined for Vagrant as I did not take the Docker rou…☆27Jun 19, 2024Updated 2 years ago
- Collection of Notes and CheatSheets used for Red teaming Certs☆502Feb 13, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- free5GC official site☆15Oct 5, 2026Updated last week
- MongoDB CVE-2025-14847 Heap Memory Leak Scanner | OP_COMPRESSED zlib Vulnerability | Bug Bounty & Red Team Tool☆35Dec 28, 2025Updated 9 months ago
- Patchless AMSI + ETW bypass via PAGE_GUARD exceptions and Vectored Exception Handler (VEH)☆17Mar 24, 2026Updated 6 months ago
- Defcon 28 - Red Team Village - Applied Purple Teaming - Why Can't We Be Friends☆26Aug 9, 2020Updated 6 years ago
- ☆12Dec 6, 2024Updated last year
- ☆12Mar 8, 2025Updated last year
- Web Crawler for Identifying Entry Points☆12Mar 26, 2024Updated 2 years ago