A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.
☆58Mar 29, 2023Updated 3 years ago
Alternatives and similar repositories for awesome-vulnerable
Users that are interested in awesome-vulnerable are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆15Jul 17, 2024Updated 2 years ago
- A security-first linter for code that shouldn't need linting☆19Sep 12, 2023Updated 3 years ago
- Broken web app intentionally built with pentesting obstacles☆16Jun 21, 2019Updated 7 years ago
- A fast, customizable service detection tool powered by a flexible fingerprint system. It helps you identify services, APIs, and network c…☆44Jun 23, 2026Updated 2 months ago
- Screenshot Shenanigans☆25Nov 20, 2017Updated 8 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Security tool against dependency typosquatting attacks☆56Updated this week
- Small wiki for Mobile Application Penetration Testing Tools☆12Apr 8, 2021Updated 5 years ago
- A Bash Script that parses through a PCAP file and automatically outputs valuable information about the Network Traffic.☆13May 28, 2024Updated 2 years ago
- HashiCorp-relevant rules for the Semgrep code analysis tool☆42Oct 3, 2023Updated 2 years ago
- ☆19Jul 30, 2024Updated 2 years ago
- ☆14Jan 8, 2026Updated 8 months ago
- Generates strings that match a regular expression☆12Jun 23, 2026Updated 2 months ago
- OWASP Foundation Web Respository☆20Aug 4, 2026Updated last month
- MinuteTimers: A simple, free and beautiful online timer.☆13Jan 14, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Decoupled AI copilot for pentesting & CTFs. Sidecar tails your shell history, parses tool outputs, grounds suggestions in your notes, and…☆13Aug 17, 2026Updated last month
- Very loud vBulletin exploit☆14Aug 12, 2020Updated 6 years ago
- Create tar/zip archives that try to exploit zipslip vulnerability.☆48Sep 20, 2024Updated 2 years ago
- A set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate in as simple a p…☆31Jul 23, 2026Updated last month
- ☆26Apr 14, 2025Updated last year
- Validate native AWS security services are properly configured across your AWS Organization☆84Updated this week
- A simple Meterpreter stager written in Rust.☆45Aug 2, 2026Updated last month
- littleoldearthquake☆12Jul 15, 2014Updated 12 years ago
- Additional active scan checks for BURP☆29Oct 3, 2024Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Automated web vulnerability scanning with LLM agents☆480Jun 18, 2025Updated last year
- ☆42Jun 2, 2026Updated 3 months ago
- A list of files / paths to probe when arbitrary files can be read on a Microsoft Windows operating system☆205May 11, 2023Updated 3 years ago
- A tool for scanning public or private AMIs for sensitive files and secrets. The tool follows the research made on AWS CloudQuarry where w…☆115Nov 13, 2024Updated last year
- WebSocket REPL for pentesters☆238Jul 24, 2024Updated 2 years ago
- Repro for Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!☆21Aug 25, 2024Updated 2 years ago
- DC619/DC858 Mainframe Environment/Lab☆11Dec 9, 2021Updated 4 years ago
- A Burp Extension that makes it easier to view all script code on a Response.☆18Nov 12, 2023Updated 2 years ago
- This is a phishing ready platform. Unlike other phishing methods, EvilnoVNC allows you to bypass 2FA using a real browser via noVNC conn…☆11Apr 7, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆14Jun 7, 2017Updated 9 years ago
- ☆10Apr 2, 2022Updated 4 years ago
- Lutech TMS EHAT-NG☆14Jul 8, 2017Updated 9 years ago
- Official code for the paper entitled "Toward Intelligent and Secure Cloud: Large Language Model Empowered Proactive Defense"☆17Apr 10, 2025Updated last year
- ☆13May 18, 2022Updated 4 years ago
- A simple index for HackTheBox machine along with tags☆16Mar 26, 2026Updated 5 months ago
- Cyber-Informed Engineering addresses how cyberattacks on engineered systems threaten physical safety and reliability beyond data loss. Th…☆18Jun 1, 2026Updated 3 months ago