143 matches found
railsgoat
RailsGoat RailsGoat is a deliberately vulnerable web application built on Ruby on Rails. It demonstrates real-world security vulnerabilities from the OWASP Top 10 and serves as a hands-on training platform for developers and security professionals. What is RailsGoat? RailsGoat is an intentionally...
pygoat
PyGoat intentionally vuln web Application Security in django. our roadmap build intentionally vuln web Application in django. The Vulnerability can based on OWASP top ten Table of Contents pygoat Installation From Sources Docker Container Installation Video Uninstallation Solutions For Developers...
DVWA
DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Application DVWA is a PHP/MariaDB web application that is damn vulnerable. Its main goal is to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of...
PMAT-labs
PMAT-labs 🔬 Welcome to the labs for Practical Malware Analysis & Triage. !Release Versionimg-version-badgerelease !Course Linkcoursecourse-link !EULAimg-license-badgeeula 🔴 WARNING 🔴 Read this carefully before proceeding. This repository contains live malware samples for use in the Practical...
Phishing-Simulation
Phishing-Simulation Phishing Simulation mainly aims to increase phishing awareness by providing an intuitive tutorial and customized assessment without any actual setup - no domain, no infrastructure, no actual email address to assess people's action on any given situation and gives ability to...
PwnAdventure3
PwnAdventure3 Welcome to Pwnie Island! Pwn Adventure 3: Pwnie Island is a limited-release, first-person, true open-world MMORPG set on a beautiful island where anything could happen. That's because this game is intentionally vulnerable to all kinds of silly hacks! Flying, endless cash, and more a...
WebGoat
WebGoat: A deliberately insecure Web Application Introduction WebGoat is a deliberately insecure web application maintained by OWASP designed to teach web application security lessons. This program is a demonstration of common server-side application flaws. The exercises are intended to be used b...
OWASPWebGoatPHP
WebGoatPHP OWASP WebGoatPHP is a port of OWASP WebGoat to PHP and MySQL/SQLite databases. The goal is to create an interactive teaching environment for web application security by offering lessons in the form of challenges. In each challenge the user must exploit the vulnerability to demonstrate...
SecurityShepherd
OWASP Security Shepherd The OWASP Security Shepherd Project is a web and mobile application security training platform. Security Shepherd has been designed to foster and improve security awareness among a varied skill-set demographic. The aim of this project is to take AppSec novices or experienc...
mutillidae
OWASP Mutillidae II OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application designed for web-security enthusiasts. It serves as a target for learning and practicing web security skills. Mutillidae can be easily installed on Linux and Windows systems using LAMP, WAMP, a...
MASTG-Hacking-Playground
MASTG Hacking Playground Welcome to the MASTG Hacking Playground which is part of the OWASP Mobile Application Security MAS project. The MASTG Hacking Playground is a collection of educational iOS and Android mobile apps, that are intentionally build insecure in order to give practical guidance t...
Application-Security-Curriculum
Application-Security-Curriculum Grant Ongers - Scaling AppSec through Education - DEF CON 29 AppSec Village...
pentest-lab-metasploitable2
Isolated Network Pentest Lab Author: Daniel Stefan de Jesus dos Reis Date: September/2026 Environment: Personal KVM lab on isolated virtual network pentestlab Scope and Authorization Notice This test was conducted exclusively against a self-owned, intentionally vulnerable virtual machine ,...
CrimsonEDR
CrimsonEDR / | | | | \ | | | | | | | | | | | | | '| | ' / |/ | ' | | | | | | / | || | | | | | | | \ \ | | | | || || | | \ \ || ||| || ||//|| |||/|| \ Developed by : Matthias Ossard https://github.com/Helixo32 CrimsonEDR is an open-source project engineered to identify specific malware...
PortSwigger-Web-Security-Academy
PortSwigger-Web-Security-Academy The interesting cases and m0r3 With nu11secur1ty 😎 Report as of June 2022 JWT - Module:...
svja
svja The RDPS Super Vulnerable Java Application is just that -- a super vulnerable java application created for the benefit of all to see a variety of common, often "complex", vulnerabilities. This software was created as part of the Roniel and DaRon Podcast Show...
CiclopeClic
CiclopeClic Controlled AI-driven security awareness tool Welcome to CiclopeClic! 🔐 Imagine having the power to generate secure, personalized links for ethical phishing campaigns at your fingertips. That's CiclopeClic! Our tool is revolutionizing how security teams conduct controlled phishing test...
mimosa
Mimosa Description Systems rebooting, database dumping, used to be called SecureCoding, now given to juniors, and finally completely rewritten. This is an opensource core; it excludes administrative controls. Features Lots of challenges References to modern pop culture Getting Started Method 1:Ja...
clickfix-simulator-2025
ClickFix Training Tool A lightweight, self-hosted simulation tool for "ClickFix" type social engineering attacks. Disclaimer This tool is for AUTHORIZED SECURITY AWARENESS TRAINING ONLY. Unauthorized use of this tool to target systems or users without explicit permission is illegal and unethical...