A very vulnerable implementation of a GraphQL API.
☆63Nov 12, 2021Updated 4 years ago
Alternatives and similar repositories for vulnerable-graphql-api
Users that are interested in vulnerable-graphql-api are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 🐑 Websheep is an app based on a willingly vulnerable ReSTful APIs.☆59Mar 25, 2024Updated 2 years ago
- a vulnerable GraphQL application☆20Dec 13, 2019Updated 6 years ago
- This is vulnerable microservice written in many language to demonstrating OWASP API Top Security Risk (under development)☆49Feb 2, 2023Updated 3 years ago
- The Pixi module is a MEAN Stack web app with wildly insecure APIs!☆142Dec 22, 2022Updated 3 years ago
- Vulnerable API☆428Mar 4, 2023Updated 3 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Web Application Firewall (WAF) Detector☆35Mar 13, 2023Updated 3 years ago
- Vuldroid is a Vulnerable Android Application made with security issues in order to demonstrate how they can occur in code☆69Sep 18, 2021Updated 5 years ago
- Damn Vulnerable Web Services is a vulnerable application with a web service and an API that can be used to learn about webservices/API re…☆522Oct 25, 2026Updated last week
- An intentionally designed broken web application based on REST API☆13May 25, 2022Updated 4 years ago
- Vulnerable REST API with OWASP top 10 vulnerabilities for security testing☆1,343Apr 7, 2026Updated 6 months ago
- A very vulnerable implementation of a GraphQL API.☆18Mar 27, 2026Updated 7 months ago
- Interactive 30/60/90-day study tracker for the HTB Certified Offensive AI Expert (COAE) certification.☆15May 24, 2026Updated 5 months ago
- Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practis…☆1,718May 24, 2025Updated last year
- An insecure example application (Java)☆34Aug 19, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Semgrep rules to identify GWT attack surface☆12Apr 28, 2022Updated 4 years ago
- Research on GraphQL from an AppSec point of view.☆416May 24, 2023Updated 3 years ago
- finds hidden parameters☆21Aug 12, 2023Updated 3 years ago
- GraphQL security workshop labs☆124Jan 31, 2026Updated 9 months ago
- vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.☆332Mar 27, 2024Updated 2 years ago
- The Proxy Auto Configuration (PAC) file dynamic generator which allows you to specify the proxying rules and the PAC-file will be generat…☆10Dec 5, 2019Updated 6 years ago
- ☆91May 1, 2023Updated 3 years ago
- ☆18May 4, 2026Updated 5 months ago
- Nuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.☆16Aug 4, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Bug Bounty tool to automate the recon process.☆12Oct 4, 2023Updated 3 years ago
- parse ffuf & map endpoints to wordlists☆20Feb 25, 2021Updated 5 years ago
- ☆33Jun 19, 2021Updated 5 years ago
- ☆21Mar 1, 2022Updated 4 years ago
- Offsec Pentest and Bug Bounty Notes☆24May 28, 2020Updated 6 years ago
- completely ridiculous API (crAPI)☆1,624Sep 9, 2026Updated last month
- Tool to get the top android apps for bug bounty purpose☆17Sep 10, 2020Updated 6 years ago
- Damn Vulnerable API☆97Sep 22, 2025Updated last year
- Trying to reproduce CVE-2021-43908☆10Aug 14, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- GraphQL threat framework used by security professionals to research security gaps in GraphQL implementations☆374Jul 1, 2025Updated last year
- Secrets detection based on regular expressions.☆23Sep 8, 2026Updated last month
- A python tool which runs to display random publicly disclosed Hackerone reports when bored. Automatically opens the report in browser.(Ad…☆42Dec 8, 2022Updated 3 years ago
- Python script to launch burp scans automatically☆32Jul 18, 2021Updated 5 years ago
- Simple extension that allows to run nuclei scanner directly from burp and transforms json results into the issues.☆33Jun 22, 2023Updated 3 years ago
- Trying to make automated recon for bug bounties☆254May 3, 2021Updated 5 years ago
- oauth security guidelines☆233Jun 25, 2019Updated 7 years ago