juice-shop / pwning-juice-shopLinks
Antora/Asciidoc content for Bjoern Kimminich's free eBook "Pwning OWASP Juice Shop"
☆232Updated last week
Alternatives and similar repositories for pwning-juice-shop
Users that are interested in pwning-juice-shop are comparing it to the libraries listed below
Sorting:
- Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF☆457Updated 3 weeks ago
- The ZAP Heads Up Display (HUD)☆271Updated last month
- Some good resources for getting started with application security☆141Updated 4 years ago
- Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"☆359Updated 5 years ago
- The Pixi module is a MEAN Stack web app with wildly insecure APIs!☆134Updated 2 years ago
- This repo is no longer in use. Please refer to https://github.com/OWASP/www-project-vulnerable-web-applications-directory☆882Updated 2 weeks ago
- A curated list of vulnerable web applications.☆328Updated last year
- Damn Vulnerable Java (EE) Application☆144Updated last year
- Repo for all the SKF Docker lab examples☆460Updated last year
- A tool geared towards pentesting APIs using OpenAPI definitions.☆182Updated 3 years ago
- A starter secure code review checklist☆184Updated 7 years ago
- ☆276Updated 4 years ago
- The BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing.☆277Updated last year
- A simple web app with a XXE vulnerability.☆229Updated 4 years ago
- This repository contains an example Python API that is vulnerable to several different web API attacks.☆27Updated 6 years ago
- Tarpit - A Web application seeded with vulnerabilities, rootkits, backdoors & data leaks☆81Updated 3 years ago
- a Damn Vulnerable Serverless Application☆545Updated 2 years ago
- Curated list of public penetration testing reports released by several consulting firms☆48Updated 7 years ago
- Bug Bounty Guide is a launchpad for bug bounty programs and bug bounty hunters.☆470Updated 3 years ago
- Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported)☆459Updated 6 years ago
- Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki☆212Updated last year
- The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters☆108Updated last year
- Damn Vulnerable Web Services is a vulnerable application with a web service and an API that can be used to learn about webservices/API re…☆499Updated last year
- This repository will contain all trainings and tutorials I have done/read to prepare for OSWE / AWAE.☆245Updated 6 years ago
- Automatically exported from code.google.com/p/domxsswiki☆546Updated 7 years ago
- Purposely vulnerable Java application to help lead secure coding workshops☆191Updated last year
- Pentesting/Bugbounty Dockerfiles.☆177Updated 4 years ago
- Vulnerable Python Application To Learn Secure Development☆124Updated last year
- Damn Vulnerable Web Application Docker container☆221Updated last year
- vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.☆324Updated last year