Vulnerable Nodejs — a real shop (NodeBazaar) intentionally full of security bugs. 14 labs, OWASP Top 10:2025, SAST benchmark. Node.js port of DVWA.
☆489Sep 8, 2026Updated 2 weeks ago
Alternatives and similar repositories for vulnerable-node
Users that are interested in vulnerable-node are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆72Nov 29, 2016Updated 9 years ago
- PoC Javascript that scans your local network when you open a webpage☆160May 27, 2016Updated 10 years ago
- Legacy WebGoat 6.0 - Deliberately insecure JavaEE application☆332Mar 27, 2024Updated 2 years ago
- Web漏洞演练平台☆477Mar 7, 2017Updated 9 years ago
- It is a hack tool kit for pentest and web security research.☆519Oct 2, 2020Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- use docker to attack web as a demo☆86Mar 24, 2016Updated 10 years ago
- ☆118Mar 8, 2020Updated 6 years ago
- Some tools to monitor BillGates CnC servers☆138Apr 14, 2014Updated 12 years ago
- 一些漏洞场景的还原，基于https://www.exploit-db.com/☆36Feb 7, 2018Updated 8 years ago
- ☆313May 22, 2016Updated 10 years ago
- WAFNinja is a tool which contains two functions to attack Web Application Firewalls.☆834Aug 11, 2026Updated last month
- ☆173Sep 6, 2020Updated 6 years ago
- SQLi-Hunter is a simple HTTP / HTTPS proxy server and a SQLMAP API wrapper that makes digging SQLi easy.☆434Apr 27, 2024Updated 2 years ago
- XSSOR：方便XSS与CSRF的工具，http://evilcos.me/lab/xssor/☆467Jun 25, 2017Updated 9 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Simple test for the May 2016 OpenSSL padding oracle (CVE-2016-2107)☆192Mar 10, 2019Updated 7 years ago
- Damn Small Vulnerable Web☆881Aug 19, 2026Updated last month
- Beebeeto FrameWork☆256Jul 27, 2015Updated 11 years ago
- Previously-0day exploit from the Hacking Team leak, written by Eugene Ching/Qavar.☆203Jul 21, 2015Updated 11 years ago
- Intentionally Vulnerable Node Applications☆16Mar 12, 2020Updated 6 years ago
- SQLI labs to test error based, Blind boolean based, Time based.☆5,848Dec 11, 2023Updated 2 years ago
- system scanner☆222Apr 6, 2022Updated 4 years ago
- ☆80Oct 10, 2014Updated 11 years ago
- OWASP VulnerableApp Project: Break it. Scan it. Reproduce it. Benchmark against it. Improve it.☆463Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Will to be a niubility scan-framework☆518Jul 1, 2025Updated last year
- Php Codz Hacking☆674Sep 5, 2015Updated 11 years ago
- Create randomly insecure VMs☆2,792Updated this week
- Customizable lazy exploit pattern utility.☆13Oct 2, 2022Updated 3 years ago
- Security-related PHP7 OPcache abuse tools and demo☆316Jan 2, 2023Updated 3 years ago
- Security CTF Toolkit (Not maintained anymore)☆370Jan 22, 2018Updated 8 years ago
- WebGoat is a deliberately insecure application☆9,346Updated this week
- This repository contains payload to test NoSQL Injections☆389May 5, 2021Updated 5 years ago
- Simple web app for displaying cowrie data in your browser☆12Jun 2, 2016Updated 10 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn rea…☆461Dec 6, 2021Updated 4 years ago
- Patch Binaries via MITM: BackdoorFactory + mitmProxy.☆1,016Jul 31, 2021Updated 5 years ago
- The Magical Code Injection Rainbow! MCIR is a framework for building configurable vulnerability testbeds. MCIR is also a collection of co…☆446Aug 7, 2020Updated 6 years ago
- Damn Vulnerable NodeJS Application☆779Mar 27, 2024Updated 2 years ago
- Automated Αll-in-One OS command injection exploitation tool.☆5,854Updated this week
- ☆1,626Feb 2, 2023Updated 3 years ago
- BrowserExploit is an advanced browser exploit pack for doing internal and external pentesting, helping gaining access to internal compute…☆331Apr 19, 2017Updated 9 years ago