AWSGoat
AWS lab
A vulnerable AWS infrastructure designed to test and demonstrate common web application security risks
AWSGoat : A Damn Vulnerable AWS Infrastructure
2k stars
36 watching
1k forks
Language: PHP
last commit: about 1 year ago
Linked from 2 awesome lists
teamssix/awesome-cloud-securityRelated projects:
| Repository | Description | Stars |
|---|---|---|
| ine-labs/gcpgoat | A vulnerable cloud infrastructure demonstrating common web application security risks and misconfigurations | 364 |
| ine-labs/azuregoat | A vulnerable Azure infrastructure simulator used to demonstrate and practice cloud security vulnerabilities | 801 |
 incredibleindishell/cors-vulnerable-lab | A lab environment simulating common CORS misconfiguration issues in web applications. | 189 |
| incredibleindishell/cors_vulnerable_lab-without_database | A simulation of CORS misconfiguration vulnerabilities in a web application | 65 |
 tegal1337/0l4bs | A collection of cross-site scripting labs and tools to help web application security enthusiasts identify and exploit vulnerabilities. | 296 |
 rhinosecuritylabs/cloudgoat | An AWS deployment tool designed to provide intentionally vulnerable cloud infrastructure for hands-on learning and penetration testing. | 2,991 |
 adeyosemanputra/pygoat | A deliberately vulnerable Django web application showcasing common web application security threats | 230 |
| incredibleindishell/ssrf_vulnerable_lab | A laboratory repository demonstrating vulnerable PHP code examples for Server-Side Request Forgery (SSRF) attacks | 679 |
 aabyss-team/awskeytools | A tool for exploiting access key leaks in AWS cloud environments | 358 |
 clong/detectionlab | Automates the creation of a comprehensive security testing environment with various security tooling and logging practices. | 4,662 |
 alienvault-labs/alienvaultlabs | A collection of experimental projects and tools focused on threat intelligence, security research, and incident response | 515 |
 vavkamil/dvwp | A fully functional WordPress environment for testing and learning about vulnerabilities. | 168 |
 dowjones/hammer | Identifies and protects insecure configurations in AWS resources across multiple accounts. | 437 |
 avishayil/caponeme | A proof-of-concept vulnerable web application demonstrating the Capital One breach on an AWS account. | 241 |
 aws-solutions/aws-waf-security-automations | Automates deployment of AWS WAF security rules to protect against common web-based attacks | 863 |