Vulnerable app with examples showing how to not use secrets

The OWASP Vulnerable Web Applications Directory project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.

intentionally vuln web Application Security in django

The CRDT Yjs WebSocket backend for conflict-free real-time collaboration in your app.

Ebitengine - A dead simple 2D game engine for Go

Hijacking valid driver services to load arbitrary (signed) drivers abusing native symbolic links and NT paths

MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way …

Web and mobile application security training platform

Extremely fast Vite-compatible web build tool written in Rust

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

CORS Misconfiguration Scanner

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

🚀 JavaScript diagramming library that uses SVG and HTML for rendering.

A very vulnerable web site written in NodeJS with the purpose of have a project with identified vulnerabilities to test the quality of security analyzers tools tools

An open source threat modeling tool from OWASP

My useful files for penetration tests, security assessments, bug bounty and other security related stuff

A fuzzer for detecting open redirect vulnerabilities

The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.

🐶 Kubernetes CLI To Manage Your Clusters In Style!

Fully open source, End to End Encrypted alternative to Google Photos and Apple Photos

XSS payloads designed to turn alert(1) into P1

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

Open Source Marketplace For Developer Tools

JavaScript library for audio visualization. 📟

TypeScript implementation of TypeIDs: type-safe, K-sortable, and globally unique identifiers inspired by Stripe IDs

A fancy, easy-to-use and reactive self-hosted docker compose.yaml stack-oriented manager

yq is a portable command-line YAML, JSON, XML, CSV, TOML and properties processor