☆84May 1, 2023Updated 2 years ago
Alternatives and similar repositories for rest-api-goat
Users that are interested in rest-api-goat are comparing it to the libraries listed below
Sorting:
- 🐑 Websheep is an app based on a willingly vulnerable ReSTful APIs.☆57Mar 25, 2024Updated last year
- The Pixi module is a MEAN Stack web app with wildly insecure APIs!☆132Dec 22, 2022Updated 3 years ago
- A simple Node.js Express REST app with some OWASP vulnerabilities.☆22Aug 13, 2024Updated last year
- Damn Vulnerable Web Services is a vulnerable application with a web service and an API that can be used to learn about webservices/API re…☆503Updated this week
- Intentionaly very vulnerable API with bonus bad coding practices☆51Nov 15, 2025Updated 3 months ago
- A very vulnerable implementation of a GraphQL API.☆61Nov 12, 2021Updated 4 years ago
- This is vulnerable microservice written in many language to demonstrating OWASP API Top Security Risk (under development)☆46Feb 2, 2023Updated 3 years ago
- Exactly what it sounds like, which is something rad☆22Oct 12, 2022Updated 3 years ago
- Vulnerable API☆418Mar 4, 2023Updated 2 years ago
- ☆14Jul 21, 2024Updated last year
- vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.☆1,328Jan 10, 2025Updated last year
- ☆422Aug 13, 2022Updated 3 years ago
- Six Degrees of Domain Admin☆15Oct 23, 2017Updated 8 years ago
- Create subdomains and files wordlists from your browser history☆13Jan 10, 2023Updated 3 years ago
- visually see issues with supported cipher suites☆17Jun 18, 2024Updated last year
- Collection of fuzzing payloads and corpus from all around added as sub modules☆15May 17, 2025Updated 9 months ago
- Vulnerable Android application for Ostolab Security Scanner☆35Jan 30, 2026Updated last month
- Dragon-GPT uses Chat-GPT, or local LLM, to execute automatic and AI-powered threat modeling analysis on a given OWASP Threat Dragon diagr…☆41Jun 20, 2025Updated 8 months ago
- Extract endpoints marked as disallow in robots files to generate wordlists.☆58Mar 2, 2022Updated 4 years ago
- (aka Kotlin Goat) - an intentionally vulnerable Kotlin application☆36Apr 17, 2024Updated last year
- ☆33Jun 19, 2021Updated 4 years ago
- C# havoc implant☆101Feb 12, 2023Updated 3 years ago
- This extension provides a way to discover NoSQL injection vulnerabilities.☆25Sep 7, 2025Updated 5 months ago
- Mythic Developer Series: Workshop Golang Agent☆25Jun 27, 2023Updated 2 years ago
- This lab is created to demonstrate pass-the-hash, blind sql and SSTI vulnerabilities☆93Jun 11, 2023Updated 2 years ago
- Collection of Helm charts that developed by the BeeInventor.☆10Feb 20, 2025Updated last year
- Don't use bookmarks. A collection of resources for designers and front-end developers.☆13Feb 4, 2023Updated 3 years ago
- Awesome Data Sanitization☆12Jun 6, 2021Updated 4 years ago
- Standalone Satellite Tracker Project based on ESP32 and Micropython☆12Aug 20, 2020Updated 5 years ago
- Smart and efficient tool to automate open redirect detection at scale.☆10Mar 21, 2022Updated 3 years ago
- A Bash wrapper for radamsa that can be used to fuzz exported activities and deep links.☆52Aug 17, 2021Updated 4 years ago
- PowerSploit - A PowerShell Post-Exploitation Framework☆43Mar 25, 2025Updated 11 months ago
- Nuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.☆13Aug 4, 2025Updated 6 months ago
- vulnerable APIs inspired by https://github.com/mattvaldes/vulnerable-api☆13Dec 8, 2021Updated 4 years ago
- Simple tools to handle string and generate subdomain permutations☆15Jun 8, 2022Updated 3 years ago
- Snyk Node Runtime Agent☆16Apr 12, 2022Updated 3 years ago
- Tree traversal and transform functions☆12Jun 7, 2015Updated 10 years ago
- Scanner for public s3 buckets☆12Oct 23, 2017Updated 8 years ago
- You can check below blog post on attacks related to azure storage.☆13Apr 8, 2021Updated 4 years ago