The OWASP Vulnerable Web Applications Directory project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.

owasp vulnerable appsec vulnerable-web-app vulnerable-web-application

Updated Nov 4, 2020

abhi-r3v0 / EVABS

Star

An open source Android application that is intentionally vulnerable so as to act as a learning platform for Android application security beginners.

mobile-app application-security pentesting android-app android-security mobile-security vulnerable ctf-platform ctf-challenges android-ctf android-pentest mobile-pentest mobile-ctf android-application-vulnerabilities android-labs

Updated Dec 18, 2019
CMake

opsxcq / docker-vulnerable-dvwa

Star

Damn Vulnerable Web Application Docker container

training docker web-app hacking web-application vulnerabilities vulnerable training-labs dvwa

Updated Apr 13, 2020
PHP

kaiiyer / awesome-vulnerable

Star

Open

Broken link

1

Aman-zishan commented Oct 2, 2020

Link to virtual hacking lab isnt working.

Hacktoberfest Contributions

6

vavkamil / awesome-vulnerable-apps

Star

Awesome Vulnerable Applications

security awesome bug hacking penetration-testing awesome-list bugbounty vulnerable vulnerable-applications

Updated Nov 6, 2020

opsxcq / exploit-CVE-2016-6515

Star

OpenSSH remote DOS exploit and vulnerable container

docker exploit container openssh vulnerable

Updated Oct 30, 2017
JavaScript

mddanish / Vulnerable-OTP-Application

Star

Vulnerable OTP/2FA Application written in PHP using Google Authenticator

php google-authenticator vulnerable otp-applications multifactor otp-bypass

Updated Nov 13, 2019
PHP

DamnVulnerableCryptoApp / DamnVulnerableCryptoApp

Star

An app with really insecure crypto. To be used to see/test/exploit weak cryptographic implementations as well as to learn a little bit more about crypto, without the need to dive deep into the math behind it

block crypto aes random detection oracle rsa md5 sha1 weak cbc padding reordering vulnerable iv ecb damn collisions

Updated Oct 14, 2020
TypeScript

kagurazakasanae / Mhyprot2DrvControl

Star

A lib that allows using mhyprot2 driver for enum process modules, r/w process memory and kill process.

windows kernel driver vulnerable mhyprot2

Updated Oct 28, 2020
C#

find-sec-bugs / find-sec-bugs-demos

Star

Repository to showcase various configuration recipes with various technologies

sample continuous-integration code vulnerable build-analysis configuration-recipes

Updated Oct 13, 2020
HTML

MobSF / MobSF-Related-Materials

Star

MobSF related Presentations, Slides and Others.

tools exploit slides scripts poc mobsf vulnerable reversing

Updated Dec 20, 2017
Java

fportantier / vulpy

Star

Vulnerable Python Application To Learn Secure Development

python flask security web sqlite vulnerable

Updated Sep 14, 2020
Python

fabaff / fsl-test-bench

Star

FSL Test bench - Ansible playbook repository to setup a save environment for security auditing and testing. It can be used for teaching security testing methodologies, testing tools, learning, and playing.

security ansible playground fedora pentesting vulnerable fedora-security-lab