sebsnyk Goto Github PK

altoroj

WARNING: This app contains security vulnerabilities. AltoroJ is a sample banking J2EE web application. It shows what happens when web applications are written with consideration of app functionality but not app security. It's a simple and uncluttered platform for demonstrating and learning more about real-life application security issues.

benchmarkjava

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

benchmarkutils

OWASP Benchmark Project Utilities - Provides scorecard generation and crawling tools for Benchmark style test suites.

broker

A broker system between a public service and a private service

c-goof

Vulnerable C++ project

composer-drupal-test

cpp-json-test

devil

Developer's Image Library (DevIL) is a cross-platform image library utilizing a simple syntax to load, save, convert, manipulate, filter, and display a variety of images with ease. It is highly portable and has been ported to several platforms.

django-defectdojo

DefectDojo is an open-source DevSecOps and vulnerability management tool.

dotnet-goof-v2

drupal-module-domain

Domain module for Drupal port to Drupal 8.

drupal-vulnerable

A vulnerable module for Drupal showing a variety of ways to make insecure coding mistakes.

dvcsharp-api

Damn Vulnerable C# Application (API)

dvfa

Damn Vulnerable Flutter App

dvhma

Damn Vulnerable Hybrid Mobile App (DVHMA) is an hybrid mobile app (for Android) that intentionally contains vulnerabilities.

dvna

Damn Vulnerable NodeJS Application

dvwa

Damn Vulnerable Web Application (DVWA)

flink

Apache Flink

flowblot.net

FlowBlot is static code analysis benchmark project by Codethreat, including sink-source challenges grouped into various technical analysis concepts.

goatlin

(aka Kotlin Goat) - an intentionally vulnerable Kotlin application

govwa

helm-goof

igoat-swift

OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS

insecureshop

An Intentionally designed Vulnerable Android Application built in Kotlin.

java-goof

java-goof-gradle-kts

java-reachability-playground

Intentionally vulnerable repository for demonstration of reachability features

java-woof

An intentionally vulnerable application, for testing

jenkins

Jenkins automation server

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application