Repositories list

• Damm-Vulnerable-Node-Application

  Public
  Damn Vulnerable NodeJS Application

  SCSS

  •

  Other

  •883883 forks•00 stars•00 issues•1414 pull requests•Updated Apr 12, 2026Apr 12, 2026

• CX-AST

  Public
  Treinamento Checkmarx

  HCL

  •00 forks•00 stars•00 issues•1919 pull requests•Updated Apr 10, 2026Apr 10, 2026

• Teste_PrDecorationCxOne

  Public
  Python

  •

  MIT License

  •00 forks•00 stars•00 issues•33 pull requests•Updated Apr 1, 2026Apr 1, 2026

• pygoat

  Public
  intentionally vuln web Application Security in django

  HTML

  •1.4k1.4k forks•00 stars•00 issues•5959 pull requests•Updated Feb 25, 2026Feb 25, 2026

• juice-shop_for_snyk_GuiCoelho

  Public
  OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

  TypeScript

  •

  MIT License

  •18k18k forks•00 stars•00 issues•22 pull requests•Updated Sep 12, 2025Sep 12, 2025

• juice-shop-lourenco

  Public
  OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

  TypeScript

  •

  MIT License

  •18k18k forks•00 stars•00 issues•11 pull request•Updated Sep 12, 2025Sep 12, 2025

• JavaVulnerableLab-SCS-TechSales

  Public
  Java

  •

  GNU General Public License v2.0

  •11 fork•00 stars•00 issues•00 pull requests•Updated Jul 4, 2025Jul 4, 2025

• Damm-Vulnerable-Python-Web-Application

  Public
  Damn Vulnerable Python Web App

  Python

  •

  MIT License

  •747747 forks•11 star•00 issues•55 pull requests•Updated Jun 10, 2025Jun 10, 2025

• Damm-Vulnerable-Java-Web-Application

  Public
  Damn Vulnerable Java (EE) Application

  Java

  •

  MIT License

  •550550 forks•00 stars•00 issues•1010 pull requests•Updated Jun 10, 2025Jun 10, 2025

• Java-Owasp-Benchmark

  Public
  OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, i…

  Java

  •

  GNU General Public License v2.0

  •1.4k1.4k forks•00 stars•00 issues•66 pull requests•Updated Apr 13, 2025Apr 13, 2025

• brokencrystals

  Public
  A Broken Application - Very Vulnerable!

  CSS

  •

  MIT License

  •319319 forks•00 stars•00 issues•1414 pull requests•Updated Apr 11, 2025Apr 11, 2025

• JavaVulnerableLab

  Public
  Vulnerable Java based Web Application

  Java

  •

  GNU General Public License v2.0

  •514514 forks•00 stars•00 issues•88 pull requests•Updated Apr 10, 2025Apr 10, 2025

• aws-goat

  Public
  AWSGoat is a vulnerable by design infrastructure on AWS featuring the latest released OWASP Top 10 web application security risks (2021) and other misconfigurat…

  PHP

  •

  MIT License

  •1.5k1.5k forks•00 stars•00 issues•1616 pull requests•Updated Apr 1, 2025Apr 1, 2025

• damn-vulnerable-js-sca

  Public
  An intentionally vulnerable Javascript app containing notable vulnerabilities in its dependencies.

  JavaScript

  •

  Apache License 2.0

  •3737 forks•00 stars•00 issues•66 pull requests•Updated Mar 30, 2025Mar 30, 2025

• Kubernetes-Terraform-DockerFile

  Public
  Vulnerable app with examples showing how to not use secrets

  Java

  •

  GNU Affero General Public License v3.0

  •550550 forks•00 stars•00 issues•77 pull requests•Updated Mar 28, 2025Mar 28, 2025

• vulnerable-graphql-api

  Public
  A very vulnerable implementation of a GraphQL API.

  TypeScript

  •

  MIT License

  •3535 forks•00 stars•00 issues•88 pull requests•Updated Mar 27, 2025Mar 27, 2025

• NodeGoat

  Public
  The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effecti…

  HTML

  •

  Apache License 2.0

  •2.4k2.4k forks•00 stars•00 issues•77 pull requests•Updated Mar 27, 2025Mar 27, 2025

• WarGame-Time1

  Public
  JavaScript

  •1010 forks•00 stars•00 issues•33 pull requests•Updated Mar 27, 2025Mar 27, 2025

• Goatlin

  Public
  (aka Kotlin Goat) - an intentionally vulnerable Kotlin application

  Kotlin

  •

  GNU General Public License v3.0

  •177177 forks•00 stars•00 issues•77 pull requests•Updated Mar 27, 2025Mar 27, 2025

• WarGame

  Public
  JavaScript

  •1010 forks•00 stars•00 issues•66 pull requests•Updated Mar 27, 2025Mar 27, 2025

• WarGame-Tati

  Public
  JavaScript

  •1010 forks•00 stars•00 issues•33 pull requests•Updated Mar 27, 2025Mar 27, 2025

• fusion-features-shop-app

  Public
  Java

  •66 forks•00 stars•00 issues•22 pull requests•Updated Mar 27, 2025Mar 27, 2025

• WebGoat-Scanning

  Public
  WebGoat is a deliberately insecure application

  JavaScript

  •

  Other

  •7.6k7.6k forks•00 stars•00 issues•55 pull requests•Updated Mar 27, 2025Mar 27, 2025

• WebGoatAzureConfig

  Public
  WebGoat is a deliberately insecure application

  JavaScript

  •

  Other

  •7.6k7.6k forks•00 stars•00 issues•77 pull requests•Updated Mar 27, 2025Mar 27, 2025

• 2ms

  Public
  Go

  •

  Apache License 2.0

  •3232 forks•00 stars•00 issues•11 pull request•Updated Mar 26, 2025Mar 26, 2025

• Damm-Vulnerable-dotNet-Application

  Public
  OWASP WebGoat.NET

  C#

  •734734 forks•00 stars•00 issues•11 pull request•Updated Jan 15, 2025Jan 15, 2025

• Damm-Vulnerable-CSharp-API

  Public
  Damn Vulnerable C# Application (API)

  C#

  •287287 forks•00 stars•7070 issues•33 pull requests•Updated Jan 15, 2025Jan 15, 2025

• Treinamento_Git_Fork_e_Pull_Request

  Public
  Java

  •33 forks•00 stars•00 issues•00 pull requests•Updated Jan 13, 2025Jan 13, 2025

• prdcatalogservice

  Public
  Go

  •88 forks•00 stars•00 issues•11 pull request•Updated Aug 22, 2024Aug 22, 2024

• gcp-checkoutservice

  Public
  Go

  •99 forks•00 stars•00 issues•11 pull request•Updated Aug 22, 2024Aug 22, 2024