A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.
☆61Mar 29, 2023Updated 3 years ago
Alternatives and similar repositories for awesome-vulnerable
Users that are interested in awesome-vulnerable are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Effective ReDoS Detection by Principled Vulnerability Modeling and Exploit Generation☆15Jul 24, 2025Updated last year
- ☆15Jul 17, 2024Updated 2 years ago
- ☆14Feb 4, 2020Updated 6 years ago
- A security-first linter for code that shouldn't need linting☆19Sep 12, 2023Updated 3 years ago
- Broken web app intentionally built with pentesting obstacles☆16Jun 21, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A fast, customizable service detection tool powered by a flexible fingerprint system. It helps you identify services, APIs, and network c…☆44Jun 23, 2026Updated 3 months ago
- Protect against subdomain takeover☆94Updated this week
- Security tool against dependency typosquatting attacks☆56Updated this week
- Small wiki for Mobile Application Penetration Testing Tools☆12Apr 8, 2021Updated 5 years ago
- LC256 - CBM style 256 color SMD computer☆19Jun 15, 2025Updated last year
- ☆24Feb 3, 2026Updated 8 months ago
- HashiCorp-relevant rules for the Semgrep code analysis tool☆42Oct 3, 2023Updated 3 years ago
- ☆16Jun 15, 2024Updated 2 years ago
- ☆19Jul 30, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆14Jan 8, 2026Updated 9 months ago
- USB Modem/IAX2 War Dialer☆21Feb 2, 2026Updated 8 months ago
- OWASP Foundation Web Respository☆20Aug 4, 2026Updated 2 months ago
- MinuteTimers: A simple, free and beautiful online timer.☆13Jan 14, 2025Updated last year
- Decoupled AI copilot for pentesting & CTFs. Sidecar tails your shell history, parses tool outputs, grounds suggestions in your notes, and…☆14Aug 17, 2026Updated last month
- IDA Hexrays To Joern☆45Nov 7, 2024Updated last year
- ☆116Feb 11, 2026Updated 7 months ago
- Very loud vBulletin exploit☆14Aug 12, 2020Updated 6 years ago
- Create tar/zip archives that try to exploit zipslip vulnerability.☆48Sep 20, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate in as simple a p…☆31Jul 23, 2026Updated 2 months ago
- Dashboard front-end for the CNCF CI Project☆13Jan 18, 2023Updated 3 years ago
- ☆10Mar 25, 2025Updated last year
- RenameLocalVars is an IDA plugin that renames local variables to something easier to read.☆15Jul 9, 2023Updated 3 years ago
- Script to install prerequisites for deploying GOAD on Ubuntu Linux 22.04☆117Jun 12, 2024Updated 2 years ago
- Wrapper for concurrent batch processing of testssl.sh commands☆13Mar 15, 2019Updated 7 years ago
- WireGuard-Go, but connect to vpp by libmemif.☆16Sep 25, 2021Updated 5 years ago
- Additional active scan checks for BURP☆29Oct 3, 2024Updated 2 years ago
- ☆31Oct 28, 2024Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Scripts I have made for blue team☆16Apr 1, 2018Updated 8 years ago
- ☆42Sep 24, 2026Updated 2 weeks ago
- WebSocket REPL for pentesters☆238Jul 24, 2024Updated 2 years ago
- Issue tracker for OCP on ARM64 dev preview releases☆13Mar 14, 2022Updated 4 years ago
- Yet Another SCA tool☆13Nov 10, 2022Updated 3 years ago
- Repro for Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!☆21Aug 25, 2024Updated 2 years ago
- DC619/DC858 Mainframe Environment/Lab☆11Dec 9, 2021Updated 4 years ago