Intentionaly very vulnerable API with bonus bad coding practices
☆55Sep 25, 2026Updated last month
Alternatives and similar repositories for vulnapi
Users that are interested in vulnapi are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A simple Node.js Express REST app with some OWASP vulnerabilities.☆28May 14, 2026Updated 5 months ago
- A very vulnerable implementation of a GraphQL API.☆63Nov 12, 2021Updated 4 years ago
- ☆91May 1, 2023Updated 3 years ago
- OWASP practice lab, just a few copy/pastes away. Fully stacked and ready to go with Docker☆23Oct 13, 2018Updated 8 years ago
- This is vulnerable microservice written in many language to demonstrating OWASP API Top Security Risk (under development)☆49Feb 2, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Vulnerable REST API with OWASP top 10 vulnerabilities for security testing☆1,343Apr 7, 2026Updated 6 months ago
- Vulnerable API☆428Mar 4, 2023Updated 3 years ago
- 🐑 Websheep is an app based on a willingly vulnerable ReSTful APIs.☆59Mar 25, 2024Updated 2 years ago
- LogSnare: A playground for testing, preventing, and logging IDOR vulnerabilities.☆35Mar 4, 2024Updated 2 years ago
- Tools & TTP's for Active Directory Red Teaming☆33Dec 22, 2024Updated last year
- 🔍 Improve your files enumeration with specific extensions!☆19Jan 11, 2022Updated 4 years ago
- Damn Vulnerable Web Services is a vulnerable application with a web service and an API that can be used to learn about webservices/API re…☆522Oct 25, 2026Updated last week
- A Python based Recon Tool to search for Storage Buckets☆12Jan 21, 2023Updated 3 years ago
- vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.☆1,354Jan 10, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- stdin writes to slack☆13Feb 8, 2020Updated 6 years ago
- completely ridiculous API (crAPI)☆1,625Sep 9, 2026Updated last month
- PowerShell cmdlet to push PowerShell attack modules to a remote system via PSRemoting and if required enable WinRM remotely.☆28Sep 13, 2016Updated 10 years ago
- Research on GraphQL from an AppSec point of view.☆416May 24, 2023Updated 3 years ago
- Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practis…☆1,718May 24, 2025Updated last year
- LLM Vulnerable Application☆13Aug 19, 2023Updated 3 years ago
- ☆34Apr 22, 2025Updated last year
- Abrupt is a web application testing framework☆16Aug 30, 2013Updated 13 years ago
- The most comprehensive Android & iOS security reference — tools, research papers, exploit techniques, platform internals, CTFs, and more.…☆19Apr 12, 2026Updated 6 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- An example of a mis-configured Rails application release under MIT license.☆21Jan 19, 2023Updated 3 years ago
- TensorFlow materials☆13Jan 8, 2021Updated 5 years ago
- Collection of generic social engineering payloads☆11Sep 20, 2016Updated 10 years ago
- CEH (Maktabkhooneh)☆14Dec 11, 2022Updated 3 years ago
- GraphQL security workshop labs☆124Jan 31, 2026Updated 9 months ago
- Slide deck for DEF CON 30 - Read Team Village - Offensive Wireless Security presentation☆14Aug 16, 2022Updated 4 years ago
- Javascript payload that inject a malicious payload into the copy-buffer of the victim☆37May 25, 2018Updated 8 years ago
- Advance and Easy recon methodology☆13Aug 9, 2024Updated 2 years ago
- Cumulonimbus-UAL_Extractor is a PowerShell based tool created by the Tesorion CERT team to help gather the Unified Audit Logging out of a…☆21Oct 25, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- lox bytecode interpreter☆10May 30, 2023Updated 3 years ago
- ☆41Jul 1, 2023Updated 3 years ago
- ☆15Updated this week
- Frameworks, Methodologies, Detection Rules and Tooling for establishing a Purple Team program.☆12Feb 11, 2024Updated 2 years ago
- Cheatsheet, Notes, Payloads and Mayhem for Burp Suite Practitioner Exam (BSCP)☆73Jan 31, 2026Updated 9 months ago
- XSS payloads to bypass various XSS filters☆15May 1, 2019Updated 7 years ago
- Musings from the brainpan.☆10Jan 8, 2019Updated 7 years ago