An intentionally-insecure web application built for educational purposes using agile development practices.

An intentionally vulnerable web application with 4 preexisting vulnerabilities to demonstrate fluency in complex web application security.

Nikto Vulnerability Report Tool 🌌

An example of an extremely vulnerable Django application. Clone of the DVWA.

MonSurf is a Web surfing tool that searches for open/vulnerable IP Addresses, ports, webcams, security cameras, satellites and IoT Devices connected over the Internet through Shodan. Keep in mind that not all features work properly and requires special care, if you emcounter any issues please do share them at the issues sections. Happy Hunting!;)

An intentionally vulnerable flask app designed to explore XSS vulnerabilities

A playground with an intentionally terribly insecure binary to learn about ROP.

Vulnerable FastAPI in reference to Opensource Web Application Security Project (OWASP) TOP 10: 2021

This is a vulnerable Flask web application designed to provide a lab environment for people who want to improve their web penetration testing skills. It includes multiple types of vulnerabilities for you to practice exploiting.

Wordpress Watcher is a wrapper for WPScan that manages scans on multiple sites and reports by email and/or syslog. Schedule scans and get notified when vulnerabilities, outdated plugins and other risks are found.

OWASP Top-10 Vulnerable blog

SQLi Labs

Web application with vulnerabilities found in real cases, both in pentests and in Bug Bounty programs.

Erlik 2 - Vulnerable-Flask-App

Vulnerable Web Application — Cyber Security Base 2023 course project I

Vulnerable Python Application To Learn Secure Development

Frida scripts for mobile application dynamic-analysis.

A script that webs scrapes multiple webpages for known vulnerable Windows Drivers, SHA256 hashes all system drivers, looks for matching driver names and SHA256 hashes.