A simple Node.js Express REST app with some OWASP vulnerabilities.
☆28May 14, 2026Updated 5 months ago
Alternatives and similar repositories for node-api-goat
Users that are interested in node-api-goat are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Intentionaly very vulnerable API with bonus bad coding practices☆55Sep 25, 2026Updated last month
- A very vulnerable implementation of a GraphQL API.☆63Nov 12, 2021Updated 4 years ago
- Penetration Testing Lab☆31Jul 17, 2014Updated 12 years ago
- OWASP practice lab, just a few copy/pastes away. Fully stacked and ready to go with Docker☆23Oct 13, 2018Updated 8 years ago
- This is vulnerable microservice written in many language to demonstrating OWASP API Top Security Risk (under development)☆49Feb 2, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- The Pixi module is a MEAN Stack web app with wildly insecure APIs!☆142Dec 22, 2022Updated 3 years ago
- This lab is created to demonstrate pass-the-hash, blind sql and SSTI vulnerabilities☆95Jun 11, 2023Updated 3 years ago
- An intentionally designed broken web application based on REST API☆13May 25, 2022Updated 4 years ago
- Local penetration testing lab using docker-compose.☆224Jun 17, 2025Updated last year
- CVE-2021-41773&CVE-2021-42013图形化漏洞检测利用工具☆14May 22, 2023Updated 3 years ago
- stdin writes to slack☆13Feb 8, 2020Updated 6 years ago
- vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.☆1,354Jan 10, 2025Updated last year
- Vulnerable REST API with OWASP top 10 vulnerabilities for security testing☆1,339Apr 7, 2026Updated 6 months ago
- Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practis…☆1,718May 24, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- completely ridiculous API (crAPI)☆1,623Sep 9, 2026Updated last month
- 🐑 Websheep is an app based on a willingly vulnerable ReSTful APIs.☆59Mar 25, 2024Updated 2 years ago
- Damn Vulnerable Web Services is a vulnerable application with a web service and an API that can be used to learn about webservices/API re…☆522Updated this week
- Materials used by Product Management and Product Marketing☆12Aug 5, 2018Updated 8 years ago
- Fuzz for hidden proxies, vhosts, and URLs☆16Oct 20, 2026Updated last week
- Collection of generic social engineering payloads☆11Sep 20, 2016Updated 10 years ago
- Slide deck for DEF CON 30 - Read Team Village - Offensive Wireless Security presentation☆14Aug 16, 2022Updated 4 years ago
- Privilege escalation challenges created for Harmonie-Technologie exhibition stand @ NDH16 (Paris)☆15Dec 26, 2019Updated 6 years ago
- Cumulonimbus-UAL_Extractor is a PowerShell based tool created by the Tesorion CERT team to help gather the Unified Audit Logging out of a…☆21Oct 25, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Frameworks, Methodologies, Detection Rules and Tooling for establishing a Purple Team program.☆12Feb 11, 2024Updated 2 years ago
- Modules designed to be used with the Conquest framework.☆22Sep 3, 2026Updated last month
- XSS payloads to bypass various XSS filters☆15May 1, 2019Updated 7 years ago
- Musings from the brainpan.☆10Jan 8, 2019Updated 7 years ago
- Username guessing tool for use against the default Solaris ftp service and GNU inetutils ftpd.☆20May 29, 2015Updated 11 years ago
- ☆10Jan 26, 2023Updated 3 years ago
- DEF CON 31 AI Village - LLMs: Loose Lips Multipliers☆10Aug 16, 2023Updated 3 years ago
- ☆14Nov 29, 2024Updated last year
- Explore 'All Wordlist' repository for a vast collection of wordlists essential for web fuzzing and testing. From API endpoints to common …☆19Sep 27, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Pentesting tool to automate common op tasks and organize discovered data.☆14Oct 16, 2026Updated last week
- ☆17Mar 6, 2019Updated 7 years ago
- Async BOF to monitor and detect clipboard changes on a target system and return the clipboard contents.☆22Jul 23, 2026Updated 3 months ago
- This repo for making it easy to transfer files on the OSCP exam using FTP,PUT,SMB,GET☆20Jun 21, 2024Updated 2 years ago
- An archive of the challenges found in the Blackhat MEA 2024 Qualifiers CTF☆12Sep 2, 2024Updated 2 years ago
- X-overdos is a A tool for performing DoS attack tests with many methods such as Layer 2, Layer 4, and also Layer 7.☆13Oct 16, 2025Updated last year
- Research on GraphQL from an AppSec point of view.☆416May 24, 2023Updated 3 years ago