vulnerable-application 开源项目推荐（112 个）

roottusk /vapi

vAPI 是 Vulnerable Adversely Programmed Interface，一种可自托管的 API，通过练习模拟 OWASP API Top 10 场景。

rewanthtammana /Damn-Vulnerable-Bank

Damn Vulnerable Bank is designed to be an intentionally vulnerable android application. This provides an interface to assess your android application security hacking skills.

oversecured /ovaa

Oversecured Vulnerable Android App

SasanLabs /VulnerableApp

OWASP VulnerableApp Project: Break it. Scan it. Reproduce it. Benchmark against it. Improve it.

logicalhacking /DVHMA

Damn Vulnerable Hybrid Mobile App (DVHMA) is an hybrid mobile app (for Android) that intentionally contains vulnerabilities.

oversecured /OversecuredVulnerableiOSApp

Oversecured Vulnerable iOS App

incredibleindishell /sqlite-lab

这些代码容易被SQL注入和SQLite数据库攻击。对于 SQLite 数据库来说，SQL 注入的负载不同，所以它只是为了娱乐。好好享受吧 \m/

R3dShad0w7 /PromptMe

PromptMe is an educational project that showcases security vulnerabilities in large language models (LLMs) and their web integrations. It includes 10 hands-on challenges inspired by the OWASP LLM Top 10, demonstrating how these vulnerabilities can be discovered and exploited in real-world scenarios.

HTBridge /pivaa

Created by High-Tech Bridge, the Purposefully Insecure and Vulnerable Android Application (PIVAA) replaces outdated DIVA for benchmark of mobile vulnerability scanners.

Warxim /vucsa

Vulnerable Client-Server Application (VuCSA) is made for learning how to perform penetration tests of non-http thick clients. It is written in Java (with JavaFX graphical user interface) and contains multiple challenges including SQL injection, RCE, XML vulnerabilities and more.

JOSHUAJEBARAJ /GCP-GOAT

GCP GOAT is the vulnerable application for learn the GCP Security

jaiswalakshansh /Vuldroid

Vuldroid 是一款存在安全漏洞的 Android 应用，内置安全问题，用于演示这些问题如何在代码中出现

Aif4thah /VulnerableLightApp

Vulnerable API for research and education

SasanLabs /VulnerableApp-facade

VulnerableApp-facade is probably most modern lightweight distributed farm of Vulnerable Applications built for handling wide range of vulnerabilities across tech stacks.

rootxjs /grpc-goat

gRPC Goat is a "Vulnerable by Design" lab created to provide an interactive, hands-on playground for learning and practicing gRPC security.

OWASP /www-project-promptme

PromptMe is an educational project that showcases security vulnerabilities in large language models (LLMs) and their web integrations. It includes 10 hands-on challenges inspired by the OWASP LLM Top 10, demonstrating how these vulnerabilities can be discovered and exploited in real-world scenarios.

arall /vulnerabilities

Examples of different vulnerabilities, in a variety of languages, shapes and sizes.

codingo /cracknet

A .net Crackme Challenge made for the SecTalks Brisbane 2017 Capture the Flag Event. Writeup/solution included.

SVelizDonoso /wingkalabs

Wingkalabs (Linux) Wingkalabs es una máquina Virtual Linux intencionalmente vulnerable. Esta máquina virtual se puede utilizar para realizar entrenamientos de seguridad, probar herramientas de seguridad y practicar técnicas comunes de pruebas de penetración.

fortify-presales /IWA-PharmacyDirect

An insecure Java/Spring web application for use in DevSecOps scenarios.