juice-shop / pwning-juice-shopLinks
Antora/Asciidoc content for Bjoern Kimminich's free eBook "Pwning OWASP Juice Shop"
☆230Updated this week
Alternatives and similar repositories for pwning-juice-shop
Users that are interested in pwning-juice-shop are comparing it to the libraries listed below
Sorting:
- Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF☆441Updated last week
- Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"☆356Updated 4 years ago
- The ZAP Heads Up Display (HUD)☆269Updated last week
- The Pixi module is a MEAN Stack web app with wildly insecure APIs!☆128Updated 2 years ago
- This repo is no longer in use. Please refer to https://github.com/OWASP/www-project-vulnerable-web-applications-directory☆880Updated last week
- Damn Vulnerable NodeJS Application☆747Updated last year
- A starter secure code review checklist☆180Updated 6 years ago
- A tool geared towards pentesting APIs using OpenAPI definitions.☆181Updated 2 years ago
- Some good resources for getting started with application security☆142Updated 4 years ago
- Curated list of public penetration testing reports released by several consulting firms☆48Updated 7 years ago
- The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters☆106Updated last year
- Repo for all the SKF Docker lab examples☆455Updated last year
- stuff i'm willing to share with the world lol☆170Updated 2 years ago
- Damn Vulnerable Java (EE) Application☆141Updated last year
- A curated list of vulnerable web applications.☆313Updated last year
- Pentesting/Bugbounty Dockerfiles.☆177Updated 4 years ago
- A simple web app with a XXE vulnerability.☆228Updated 3 years ago
- a Damn Vulnerable Serverless Application☆541Updated 2 years ago
- Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information! It's yo…☆216Updated 5 years ago
- Fast and easy script to manage pentesting training apps☆369Updated last year
- ☆276Updated 3 years ago
- This is an offensive guide to securing AWS infrastructures. The hope is that by knowing how to take advantage of various types of AWS wea…☆172Updated 6 years ago
- bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.☆546Updated 2 years ago
- These are the regexes that power truffleHog☆219Updated 2 years ago
- Security Mindmap that could be useful for the infosec community when doing pentest, bug bounty or red-team assessments.☆745Updated 3 years ago
- Host and manage multiple Juice Shop instances for security trainings and Capture The Flags☆292Updated this week
- Purposely vulnerable Java application to help lead secure coding workshops☆186Updated last year
- How to prepare for OSCP complete guide☆128Updated 5 years ago
- 🏰 A Python script for AWS S3 bucket enumeration.☆144Updated 2 years ago
- The BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing.☆276Updated last year