Simple vulnerability labs that created using PHP and MySQL.
☆16Dec 30, 2022Updated 3 years ago
Alternatives and similar repositories for vulnerable-web
Users that are interested in vulnerable-web are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A simple vulnerable webapp created by PHP☆14Apr 18, 2025Updated last year
- Spring4Shell reproduce☆11Apr 1, 2022Updated 4 years ago
- PHP lab to test captcha bypassing☆30Jan 8, 2024Updated 2 years ago
- Links to VeteranSec Resources☆12May 18, 2020Updated 6 years ago
- All in one subdomain Enumeration tool☆21Jan 1, 2023Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆10Apr 30, 2022Updated 4 years ago
- Go script to guess an API key / OAuth token found during pentest. CLI version of https://github.com/daffainfo/apiguesser-web/☆44Aug 28, 2022Updated 3 years ago
- Python3 script to quickly get various information from a domain controller through his LDAP service.☆11Feb 23, 2022Updated 4 years ago
- ☆13Mar 11, 2026Updated 5 months ago
- Damn Vulnerable PHP Application (DVPA) - It is Lab Written in The PHP lang, Which Contains PHP Type Juggling - RCE Challenges☆32May 18, 2022Updated 4 years ago
- Aggregated wordlist pulled from commonly used tools for discovery, enumeration, fuzzing, and exploitation.☆11Dec 30, 2020Updated 5 years ago
- ☆10Sep 30, 2020Updated 5 years ago
- Unauthenticated RCE Flaw in Rejetto HTTP File Server (CVE-2024-23692)☆16Jun 13, 2024Updated 2 years ago
- ☆10Apr 13, 2022Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Vulnerabilities exploitation examples, python☆25May 22, 2023Updated 3 years ago
- Random Tools for Bug Bounty☆151Oct 15, 2022Updated 3 years ago
- Detailed information about API key / OAuth token (Description, Request, Response, Regex, Example)☆299Sep 26, 2023Updated 2 years ago
- List of bug bounty programs of companies/organisations in Switzerland☆13Oct 28, 2021Updated 4 years ago
- Go script for bypassing 403 forbidden☆167Aug 6, 2021Updated 5 years ago
- Template to detect some malware☆15Aug 7, 2023Updated 3 years ago
- Just proof of concept using Kong API Gateway☆23Dec 11, 2022Updated 3 years ago
- ☆11May 30, 2021Updated 5 years ago
- Extract most frequent words in a list of subdomains☆13Feb 15, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Makeup store iOS app developed in Swift☆11Apr 28, 2023Updated 3 years ago
- ☆12May 31, 2023Updated 3 years ago
- Manticore Ransomware Emulation - Educational Purpose Only!☆10Aug 2, 2020Updated 6 years ago
- Reference list for my Ransomware exploitation research. Lists current DLLs I have seen to date that some ransomware search for, which I h…☆11Jul 16, 2022Updated 4 years ago
- Collection of various WINAPI tricks / features used or abused by Malware☆13Mar 28, 2022Updated 4 years ago
- The OWASP Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and…☆10Oct 12, 2019Updated 6 years ago
- ToyOS is a simple x86 OS that only accepts numeric values into the input stream and returns them to a standard out console.☆12Nov 27, 2025Updated 8 months ago
- SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in …☆12Nov 8, 2021Updated 4 years ago
- SubDomain Finder☆12Nov 9, 2021Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Go scripts for finding sensitive data like API key / some keywords in the github repository☆158Jun 5, 2022Updated 4 years ago
- The Primate Pack is a suite of extensions for Caido.☆14Sep 29, 2024Updated last year
- gup aka Get All Urls parameters to create wordlists for brute forcing parameters.☆18Dec 4, 2021Updated 4 years ago
- ☆16Dec 3, 2020Updated 5 years ago
- Pretexta is a social engineering simulation lab designed to help security professionals, educators, and organizations understand why soci…☆36Jul 29, 2026Updated last week
- SheepDB is a lightweight service that uses Google Spreadsheets as a storage backend. It provides an API server for managing your data.☆11Feb 17, 2025Updated last year
- A small string masking library in javascript☆12Dec 15, 2023Updated 2 years ago