Pinned Repositories
bodgeit
The BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing.
groovygoat
POC for dynamic groovy/thymeleaf based lesson system
java-goof
JavaSecurity
Java web and command line application projects for different security topics
JavaVulnerableLab
Vulnerable Java based Web Application
MoneyX
MoneyX is an intentionally vulnerable JSP application used for training developers in application security concepts.
OWASP-Faux-Bank-ClassicASP
A proof of concept project that demonstrates oWASP.org's top 10 web vulnerabilities
terracotta-bank
A darned-vulnerable Java web application - For educating on and practicing secure Java coding techniques
VulnerableSpring
Vulnerable Java based Web Application
WebGoat-Legacy
Legacy WebGoat 6.0 - Deliberately insecure JavaEE application
SuperSteelBlue's Repositories
SuperSteelBlue/bodgeit
The BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing.
SuperSteelBlue/java-goof
SuperSteelBlue/JavaSecurity
Java web and command line application projects for different security topics
SuperSteelBlue/JavaVulnerableLab
Vulnerable Java based Web Application
SuperSteelBlue/terracotta-bank
A darned-vulnerable Java web application - For educating on and practicing secure Java coding techniques
SuperSteelBlue/VulnerableSpring
Vulnerable Java based Web Application
SuperSteelBlue/AltoroJ
WARNING: This app contains security vulnerabilities. AltoroJ is a sample banking J2EE web application. It shows what happens when web applications are written with consideration of app functionality but not app security. It's a simple and uncluttered platform for demonstrating and learning more about real-life application security issues.
SuperSteelBlue/commix-testbed
A collection of web pages, vulnerable to command injection flaws.
SuperSteelBlue/docker-bench-security
The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
SuperSteelBlue/dvna
Damn Vulnerable NodeJS Application
SuperSteelBlue/environment-scowlcake-production
SuperSteelBlue/environment-scowlcake-staging
SuperSteelBlue/hackazon
A modern vulnerable web app
SuperSteelBlue/igoat
OWASP iGoat - A Deliberately Insecure iOS Application by Swaroop Yermalkar
SuperSteelBlue/jquery-tiny-pubsub
A really, really, REALLY tiny pub/sub implementation for jQuery.
SuperSteelBlue/js-vuln-db
A collection of JavaScript engine CVEs with PoCs
SuperSteelBlue/juice-shop
OWASP Juice Shop is an intentionally insecure webapp for security trainings written entirely in Javascript which encompasses the entire OWASP Top Ten and other severe security flaws.
SuperSteelBlue/keywhiz
A system for distributing and managing secrets
SuperSteelBlue/leastauthority.com
Least Authority S4
SuperSteelBlue/lets-be-bad-guys
A deliberately-vulnerable website and exercises for teaching about the OWASP Top 10
SuperSteelBlue/node-hack
A vulnerable nodejs application for hollywood-style hacking demos
SuperSteelBlue/node.nV
Intentionally Vulnerable node.js application
SuperSteelBlue/NodeGoat
The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.
SuperSteelBlue/OWASPWebGoatPHP
SuperSteelBlue/railsgoat
A vulnerable version of Rails that follows the OWASP Top 10
SuperSteelBlue/sqli-labs
SQLI labs to test error based, Blind boolean based, Time based.
SuperSteelBlue/vulnerable-app
A sample web application using Node.js, Express and Angular that is vulnerable to common security vulnerabilities.
SuperSteelBlue/WackoPicko
WackoPicko is a vulnerable web application used to test web application vulnerability scanners.
SuperSteelBlue/WebGoat
WebGoat 8.0
SuperSteelBlue/xvwa
XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.