β91May 1, 2023Updated 3 years ago
Alternatives and similar repositories for rest-api-goat
Users that are interested in rest-api-goat are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- π Websheep is an app based on a willingly vulnerable ReSTful APIs.β59Mar 25, 2024Updated 2 years ago
- The Pixi module is a MEAN Stack web app with wildly insecure APIs!β142Dec 22, 2022Updated 3 years ago
- A simple Node.js Express REST app with some OWASP vulnerabilities.β28May 14, 2026Updated 5 months ago
- Intentionaly very vulnerable API with bonus bad coding practicesβ55Sep 25, 2026Updated last month
- Penetration Testing Labβ31Jul 17, 2014Updated 12 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer β’ AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Vulnerable REST API with OWASP top 10 vulnerabilities for security testingβ1,343Apr 7, 2026Updated 6 months ago
- vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.β1,354Jan 10, 2025Updated last year
- This lab is created to demonstrate pass-the-hash, blind sql and SSTI vulnerabilitiesβ95Jun 11, 2023Updated 3 years ago
- completely ridiculous API (crAPI)β1,624Sep 9, 2026Updated last month
- OWASP practice lab, just a few copy/pastes away. Fully stacked and ready to go with Dockerβ23Oct 13, 2018Updated 8 years ago
- β442Aug 13, 2022Updated 4 years ago
- A very vulnerable implementation of a GraphQL API.β63Nov 12, 2021Updated 4 years ago
- Vulnerable APIβ428Mar 4, 2023Updated 3 years ago
- Excalidraw library for threat modeling diagramsβ10Jun 30, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer β’ AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Six Degrees of Domain Adminβ14Oct 23, 2017Updated 9 years ago
- This is vulnerable microservice written in many language to demonstrating OWASP API Top Security Risk (under development)β49Feb 2, 2023Updated 3 years ago
- β14Jul 21, 2024Updated 2 years ago
- Exactly what it sounds like, which is something radβ22Oct 12, 2022Updated 4 years ago
- Collection of generic social engineering payloadsβ11Sep 20, 2016Updated 10 years ago
- β13Oct 18, 2021Updated 5 years ago
- Parse OpenAPI specifications, previously known as Swagger specifications, into the BurpSuite for automating RESTful API testing β approve β¦β48Feb 22, 2024Updated 2 years ago
- Local penetration testing lab using docker-compose.β224Jun 17, 2025Updated last year
- Awesome Data Sanitizationβ12Jun 6, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways β’ AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- β32Dec 28, 2023Updated 2 years ago
- GCP GOAT is the vulnerable application for learn the GCP Securityβ81May 20, 2026Updated 5 months ago
- Bypassing AV, EDR, Application Whitelisting and ASR Rulesβ13Apr 18, 2023Updated 3 years ago
- CVE-2021-41773&CVE-2021-42013εΎε½’εζΌζ΄ζ£ζ΅ε©η¨ε·₯ε ·β14May 22, 2023Updated 3 years ago
- stdin writes to slackβ13Feb 8, 2020Updated 6 years ago
- Extract endpoints marked as disallow in robots files to generate wordlists.β60Mar 2, 2022Updated 4 years ago
- A small script for my recon during bug hunting. Needs some modificationsβ18Mar 5, 2020Updated 6 years ago
- Exploit CVE-2021-25735: Kubernetes Validating Admission Webhook Bypassβ17Apr 23, 2021Updated 5 years ago
- Damn Vulnerable Python Web Appβ196May 21, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways β’ AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- An intentionally designed broken web application based on REST APIβ13May 25, 2022Updated 4 years ago
- Extract parameters/paths from urlsβ17Aug 2, 2020Updated 6 years ago
- Self-Hosted AI Assistant for Data Analytics. Designed with Data Security as a Top Priorityβ17Apr 5, 2026Updated 6 months ago
- Material e instructivo para el Workshop de nerdearla 101 v2β13Jul 27, 2022Updated 4 years ago
- Blank methodology sheet for the OSWE examβ14Dec 17, 2021Updated 4 years ago
- An intentionally designed broken web application based on REST API.β583Jun 10, 2021Updated 5 years ago
- Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn reaβ¦β461Dec 6, 2021Updated 4 years ago