A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.
Damn Vulnerable NodeJS Application
Intentionally Vulnerable Serverless Functions to understand the specifics of Serverless Security Vulnerabilities
A simple PHP application to learn SQL Injection detection and exploitation techniques.
Capture the flag challenges
gRPC Goat is a "Vulnerable by Design" lab created to provide an interactive, hands-on playground for learning and practicing gRPC security.
Bash script to manage insecure web apps using docker and hosts aliases for pentest practice
Deliberately vulnerable REST API for OWASP Top 10 (2023) security testing and learning.
AzureGenerat0r, a tool for automated generation and configuration of test environments in Microsoft Azure
A very silly vulnerable application to review your knowledge about basics of cybersecurity.
Vulnerable Shopping Cart is insecure e-commerce application designed for cybersecurity education and penetration testing practice.
A multi-industry vulnerable attack surface with 450+ real API endpoints and 12 web apps
Simple Spring/Java web application for Fortify demonstrations
Dataset with 54k vulnerable ELF executables, compiled from C sources and targetting i386 ποΈ
An insecure React Native mobile application for use in Micro Focus demonstrations
To associate your repository with the vulnerable-apps topic, visit your repo's landing page and select "manage topics."