owaspbwa

Vulnerable apps

A collection of vulnerable web applications demonstrating common web application security issues.

OWASP Broken Web Applications Project

GitHub

298 stars
16 watching
104 forks
Language: PHP
last commit: over 2 years ago

Related projects:

RepositoryDescriptionStars
owasp/owasp-vwadA registry of known vulnerable web applications872
owasp/railsgoatA vulnerable Ruby on Rails application designed to educate developers about common web security vulnerabilities.872
0c34/govwaA vulnerable web application designed to simulate common web vulnerabilities for educational purposes.175
interference-security/dvwsAn OWASP vulnerable web application demonstrating various security vulnerabilities using WebSockets346
stamparm/dsvwA deliberately vulnerable web application designed to demonstrate various common web vulnerabilities794
lancechentw/vulnappAn Android app demonstrating common vulnerabilities5
owasp/dvsaAn intentionally vulnerable serverless application for testing security skills and understanding secure development practices.534
cspf-founder/javavulnerablelabA vulnerable Java-based web application used to demonstrate security vulnerabilities and provide training for secure coding practices260
ramadhanamizudin/lazywebA web application demonstrating common server-side application flaws and vulnerabilities.116
owasp/owaspwebgoatphpAn interactive web application designed to teach web application security through challenges and lessons.121
t0thkr1s/allsafeAn intentionally vulnerable Android application with various exploitable security vulnerabilities.217
anxolerd/dvpwaThis Damn Vulnerable Python Web Application is designed to demonstrate real-world vulnerabilities in web development using a well-designed application164
snoopysecurity/dvws-nodeAn insecure web service application used to simulate various web vulnerabilities and demonstrate their mitigation strategies.459
owasp/igoat-swiftA Damn Vulnerable iOS Application for Learning Exploitation and Defense414
avishayil/caponemeA proof-of-concept vulnerable web application demonstrating the Capital One breach on an AWS account.241