kubernetes-goat

Kubernetes Goat ✨ The Kubernetes Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security 🚀 🙌 Refer to https://madhuakula.com/kubernetes-goat for the guide 📖 🧰 Setting up Kubernetes Goat Ensure you have admin access to the Kubernetes cluster...

GCPGoat

GCPGoat : A Damn Vulnerable GCP Infrastructure Compromising an organization's cloud infrastructure is like sitting on a gold mine for attackers. And sometimes, a simple misconfiguration or a vulnerability in web applications, is all an attacker needs to compromise the entire infrastructure. Since...

mutillidae

OWASP Mutillidae II OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application designed for web-security enthusiasts. It serves as a target for learning and practicing web security skills. Mutillidae can be easily installed on Linux and Windows systems using LAMP, WAMP, a...

CVE-2007-2447-Exploit

CVE-2007-2447-Exploit This is a exploit for CVE-2007-2447; Vulnerable SMB...

Vulnerable-Web-Application

Vulnerable Web Application What is Vulnerable-Web-Application Vulnerable-Web-Application is a website that is prepared for people who are interested in web penetration and who want to have information about this subject or to be working. In fact, the website is quite simple to install and use...

vulhub

Vulhub is an open-source collection of pre-built, ready-to-use vulnerable Docker environments. With just one command you can launch a vulnerable environment for security research, learning, or demonstration, no prior Docker experience required. 中文版本Chinese version Quick Start Install Docker examp...

sadcloud

Sadcloud sadcloud is a tool for spinning up insecure AWS infrastructure with Terraform. It supports approx. 84 misconfigurations across 22 AWS Services. The inital set of misconfigurations were drawn from ScoutSuite, NCCGroup's Multi-cloud auditing tool. sadcloud was created to easily allow...

DVIA-v2

DVIA-v2 Powered by 8ksec.io DVIA-v2 written in Swift along with additional vulnerabilities Damn Vulnerable iOS App DVIA is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration...

Broken-Vulnerable-Code-Snippets

Vulnerable-Code-Snippets A collection of vulnerable code snippets taken form around the internet. Snippets taken from various blog posts, books, resources etc. No Copyright Infringement Intended Note: This is not a good benchmark for testing static analysis tools, they are broken code snippets,...

SecGen

Security Scenario Generator SecGen Summary SecGen creates vulnerable virtual machines, lab environments, and hacking challenges, so students can learn security penetration testing techniques. Boxes like Metasploitable2 are always the same, this project uses Vagrant, Puppet, and Ruby to create...

cutter

Cutter Cutter is a free and open-source reverse engineering platform powered by rizin. It aims at being an advanced and customizable reverse engineering platform while keeping the user experience in mind. Cutter is created by reverse engineers for reverse engineers. Learn more at cutter.re. Getti...

marshalsec

Java Unmarshaller Security - Turning your data into code execution If you came here for Log4Shell/CVE-2021-44228, you may want to read about the exploitation vectors and affected Java runtime versions: https://mbechler.github.io/2021/12/10/PSALog4ShellJNDIInjection/ Paper It's been more than two...

vuln-bank

Vulnerable Bank Application 🏦 A deliberately vulnerable web application for practicing application security testing of Web, APIs and LLMs, secure code review and implementing security in CI/CD pipelines. ⚠️ WARNING: This application is intentionally vulnerable and should only be used for...

cve-2014-0160

CVE-2014-0160 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2014-0160 Image author: https://github.com/hmlio/vaas-cve-2014-0160...

cve-2018-19207

CVE-2018-19207 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-19207 Image author: https://github.com/cved-sources/cve-2018-19207...

samba-3.0.24-CVE-2007-2447-vunerable-

samba-3.0.24-CVE-2007-2447-vunerable-...

log4shell

log4shell Python Script to scan the server file system for log4j jars that are vulnerable to CVE-2021-44228 and CVE-2021-45046. The script recursively goes through the file system including zip, ear, war to find log4j versions 2. to 2.15 with org/apache/logging/log4j/core/lookup/JndiLookup.class...

cnappgoat

!made-with-Gomade-with-go-img !GitHub Releaserelease-imgrelease !Go Report Cardgo-report-imggo-report !License: Apache-2.0license-imglicense !Maintainermaintainer-1 CNAPPgoat CNAPPgoat is a multi-cloud, vulnerable-by-design environment deployment tool – specifically engineered to facilitate...

cve-2018-17207

CVE-2018-17207 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-17207 Image author: https://github.com/cved-sources/cve-2018-17207...

log4j-vulnerable-app-cve-2021-44228-terraform

log4j-vulnerable-app-cve-2021-44228-terraform A Terraform to deploy vulnerable app and a JNDIExploit to work with CVE-2021-44228 About Stack This terraform creates two instances on a VPC in AWS Cloud. You just need to export your AWSACCESSKEYID and AWSSECRETACCESSKEY One instance is JNDIExploit...