WebGoat

WebGoat: A deliberately insecure Web Application Introduction WebGoat is a deliberately insecure web application maintained by OWASP designed to teach web application security lessons. This program is a demonstration of common server-side application flaws. The exercises are intended to be used b...

web-threat-mitigation

web-threat-mitigation Hands-on lab on detecting and mitigating web app threats using OWASP ZAP, Burp Suite, and ModSecurity WAF with OWASP CRS. Case study: Spring4Shell CVE-2022-22965. Local Docker-based setup. Web Threat Mitigation Lab – OWASP ZAP, ModSecurity & CVE Exploitation This repository...

WebGoat

Important Information This is not the repository you are looking for The OWASP WebGoat project and code base is maintained at: https://github.com/WebGoat...

Day-14--Reflected-Cross-Site-Scripting-XSS-Broken-Access-Control-IDOR-Assessment

Day 14: Reflected Cross-Site Scripting XSS & Broken Access C...

WebGoat v2026.3

WebGoat: A deliberately insecure Web Application Introduction WebGoat is a deliberately insecure web application maintained by OWASP designed to teach web application security lessons. This program is a demonstration of common server-side application flaws. The exercises are intended to be used b...

Metasploit

Metasploit Research Structured documentation of my Metasploit...

ch.rasc:embeddedtc (1.23), ch.rasc:embeddedtc-maven-plugin (1.18) +6 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (7.0.65)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.65 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.23 - ch.rasc:embeddedtc-maven-plugin 1.18 -...

ch.rasc:embeddedtc (1.23), ch.rasc:embeddedtc-maven-plugin (1.18) +6 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (7.0.65)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.65 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.23 - ch.rasc:embeddedtc-maven-plugin 1.18 -...

web-app-security-owasp-zap

🔐 Web Application Security Testing with OWASP ZAP Author:...

Exploit for Code Injection in Vmware Spring_Framework

web-threat-mitigation Hands-on lab on detecting and mitigating...

Exploit for Buffer Underflow in Microsoft

简介 安全行业小工具以及学习资源收集项目，此项目部分内容来自：https://www.t00ls.net/thread-38964-1-1.html 感谢其分享，这里只是作为个人备份，如有问题可邮件通知。 安全资源 安全资源包括安全书籍，资料，安全教程，学习平台等等。 设备基线加固资料 https://github.com/re4lity/Benchmarks https://learn.cisecurity.org/benchmarks https://nvd.nist.gov/ncp/repository 内网渗透学习资料...

Exploit for Buffer Underflow in Microsoft

github 军火库 web，安全，渗透，军火库 漏洞及渗透练习平台： WebGoat漏洞练习环境 https://github.com/WebGoat/WebGoat https://github.com/WebGoat/WebGoat-Legacy Damn Vulnerable Web Application漏洞练习平台 https://github.com/RandomStorm/DVWA 数据库注入练习平台 https://github.com/Audi-1/sqli-labs 用node编写的漏洞练习平台，like OWASP Node Goat...