layro01 / node-api-goat
A simple Node.js Express REST app with some OWASP vulnerabilities.
☆18Updated 7 months ago
Alternatives and similar repositories for node-api-goat:
Users that are interested in node-api-goat are comparing it to the libraries listed below
- Intentionaly very vulnerable API with bonus bad coding practices☆44Updated last year
- ☆76Updated last year
- 🐑 Websheep is an app based on a willingly vulnerable ReSTful APIs.☆53Updated last year
- This is vulnerable microservice written in many language to demonstrating OWASP API Top Security Risk (under development)☆43Updated 2 years ago
- A very vulnerable implementation of a GraphQL API.☆59Updated 3 years ago
- Target practice for ffuf☆62Updated 3 years ago
- A Burp Suite Extension for pentester and bug bounty hunters an to maintain checklist, map flows, write test cases and track vulnerabiliti…☆113Updated last year
- Android Pentest Setup Environment☆30Updated 2 years ago
- Resources to learn cloud environment and pentesting the same, contains AWS, Azure, Google Cloud☆52Updated 3 years ago
- A simple place to learn XSS☆30Updated 4 years ago
- Damn Vulnerable Rails app☆12Updated 12 years ago
- HTTP parameter discovery suite.☆61Updated 4 years ago
- Checks whether a domain is hosted on a cloud service such as AWS, Azure or CloudFlare☆58Updated 2 years ago
- Burp Suite Extension to monitor new scope☆17Updated 3 years ago
- Regex patterns for manual application source code review☆27Updated 4 years ago
- a vulnerable GraphQL application☆19Updated 5 years ago
- Publicly availalbe vulnarble by desgin vm/machines☆30Updated 2 years ago
- ☆26Updated 4 years ago
- Simple extension that allows to run nuclei scanner directly from burp and transforms json results into the issues.☆29Updated last year
- Template used for my OSCP exam.☆28Updated 2 years ago
- ☆14Updated 4 years ago
- Create your own recon & vulnerability scanner with Trickest and GitHub☆49Updated last year
- Repo for hosting rayder workflows☆58Updated last year
- When it comes to exploiting web application security, this is a methodology. Enumeration and Networking guidelines are also listed to hel…☆22Updated 3 years ago
- Damn Vulnerable C# Application (API)☆73Updated 8 months ago
- ☆22Updated 3 years ago
- Enhanced fork with logging, OpenAPI 3.0 and Python 3 for security monitoring workshops☆42Updated last year
- Go script to guess an API key / OAuth token found during pentest. CLI version of https://github.com/daffainfo/apiguesser-web/☆44Updated 2 years ago
- ☆39Updated last year
- Tracking my journey towards earning my OSCP. This includes the process of everything that I learn along the way.☆47Updated 3 years ago