π Websheep is an app based on a willingly vulnerable ReSTful APIs.
β59Mar 25, 2024Updated 2 years ago
Alternatives and similar repositories for websheep
Users that are interested in websheep are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- β91May 1, 2023Updated 3 years ago
- The Pixi module is a MEAN Stack web app with wildly insecure APIs!β142Dec 22, 2022Updated 3 years ago
- Damn Vulnerable Web Services is a vulnerable application with a web service and an API that can be used to learn about webservices/API reβ¦β522Oct 25, 2026Updated last week
- A very vulnerable implementation of a GraphQL API.β63Nov 12, 2021Updated 4 years ago
- This is vulnerable microservice written in many language to demonstrating OWASP API Top Security Risk (under development)β49Feb 2, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI β’ AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Vulnerable REST API with OWASP top 10 vulnerabilities for security testingβ1,343Apr 7, 2026Updated 6 months ago
- Intentionaly very vulnerable API with bonus bad coding practicesβ55Sep 25, 2026Updated last month
- vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.β1,354Jan 10, 2025Updated last year
- Cyber Threat Intelligence Resources and Dashboardβ12Feb 23, 2022Updated 4 years ago
- A simple Node.js Express REST app with some OWASP vulnerabilities.β28May 14, 2026Updated 5 months ago
- Parse OpenAPI specifications, previously known as Swagger specifications, into the BurpSuite for automating RESTful API testing β approveβ¦β48Feb 22, 2024Updated 2 years ago
- jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()β¦β11Apr 9, 2021Updated 5 years ago
- Vulnerable APIβ428Mar 4, 2023Updated 3 years ago
- β21Mar 27, 2026Updated 7 months ago
- Managed Database hosting by DigitalOcean β’ AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Bypassing AV, EDR, Application Whitelisting and ASR Rulesβ13Apr 18, 2023Updated 3 years ago
- A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Secβ¦β339Jun 10, 2026Updated 4 months ago
- Trying to reproduce CVE-2021-43908β10Aug 14, 2022Updated 4 years ago
- A GitHub workflow to identify employees that have leaked your organization's codeβ14May 23, 2023Updated 3 years ago
- A command-line utility for auditing DNS configuration using Zonemaster APIβ33Aug 21, 2023Updated 3 years ago
- Magento Security Scannerβ13Jan 10, 2022Updated 4 years ago
- This repository contains an example Python API that is vulnerable to several different web API attacks.β70Feb 7, 2024Updated 2 years ago
- Custom scripts used during the scenarioβ19Apr 5, 2021Updated 5 years ago
- Burp Suite extension for parsing Swagger web service definition filesβ20Jul 15, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient β’ AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- β16Sep 4, 2025Updated last year
- Sharing Various Thingsβ21Jun 28, 2022Updated 4 years ago
- A burpsuite extension that helps security researchers find public security reports published on h1 based on the selected hostβ43May 9, 2020Updated 6 years ago
- Script to automate, when possible, the passive reconnaissance performed on a website prior to an assessment.β39Oct 23, 2026Updated last week
- The tool helps in quickly identifying vulnerabilities by examining a comprehensive list of potential paths on a website, making it usefulβ¦β11Mar 24, 2025Updated last year
- β18Jul 9, 2020Updated 6 years ago
- Burp suite Certificate modification toolβ18Jul 10, 2026Updated 3 months ago
- Removes duplicate entries from a file, resulting in only unique parameter combinations. Useful for parsing waybackurls and making recon mβ¦β11May 31, 2020Updated 6 years ago
- A deliberately vulnerable Android application to demonstrate exfiltration scenariosβ13May 20, 2020Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI β’ AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- by Gary O'Leary-Steele | cloned from https://sentinel.appcheck-ng.com/static/pm/logger.htmlβ12Sep 16, 2019Updated 7 years ago
- Vulnerable Banking Suiteβ175Sep 29, 2025Updated last year
- Quick tool to create custom wordlists like how fuzzers workβ10Sep 29, 2023Updated 3 years ago
- Mishky's AD Range & The Escalation Path from Hellβ20Jan 16, 2025Updated last year
- NestJs module to easily implement event driven architecture using RxJs in any NestJs projectβ11Apr 1, 2022Updated 4 years ago
- Extract parameters/paths from urlsβ17Aug 2, 2020Updated 6 years ago
- all manner of wordlistsβ23Jan 19, 2022Updated 4 years ago