boost-sandbox Goto Github PK

branch-protection-ctf

branch-protection-ctf-v2

brokencrystals

A Broken Application - Very Vulnerable!

capital

A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Security vulnerabilities within your own API Security CTF.

circleci-oidc

crapi

completely ridiculous API (crAPI)

dsvw

Damn Small Vulnerable Web

fulldotnetwebapp

This is a sample repo demonstrating how to integrate https://github.com/marketplace/actions/securitycodescan into CI/CD process.

gitlabhq

GitLab CE Mirror | Please open new issues in our issue tracker on GitLab.com

goat

intentionally-vulnerable-golang-project

This is a project we created that has dependencies with vulnerabilities, for us to test out nancy

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

module-tests-sonarqube

pinata-ado

poutinefest

railsgoat

A vulnerable version of Rails that follows the OWASP Top 10

scanner-e2e-test

secdevlabs

A laboratory for learning secure web and mobile development in a practical manner.

semgrep-rules

Semgrep rules registry

some-java-demo

sturdy-adventure-bench

terragoat

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

upperlowercase

upperlowercasegoat

A vulnerable version of Rails that follows the OWASP Top 10

vulnerable-code-snippets

Twitter vulnerable snippets

vulnnodeapp

A vulnerable node.js application

webgoat.net

OWASP WebGoat.NET

wrongsecrets

Vulnerable app with examples showing how to not use secrets

zents

ZenTS is a Node.js & TypeScript MVC-Framework for building rich web applications, released as free and open-source software under the MIT License. It is designed for building web applications with modern tools and design patterns.