Entry
Appears in 4 awesome lists
An intentionally vulnerable e-commerce app built with Next.js for web security training (OWASP Top 10, API security, CTF challenges). Quick start with npx create-oss-store.
Section: Off-Line · An intentionally vulnerable e-commerce app built with Next.js for web security training (OWASP Top 10, API security, CTF challenges). Quick start with npx create-oss-store.
Section: Intentionally Vulnerable Systems · Run npx create-oss-store, open your browser, and start hunting flags.
Section: OWASP Top 10 · An intentionally vulnerable e-commerce application built with Next.js and React. A self-hosted CTF platform for web security training covering OWASP Top 10 vulnerabilities.
Section: Application · Intentionally vulnerable e-commerce application built with Next.js - Written by @kOaDT.
Pentest-Tools.com - Pentest-Ground is a free playground with deliberately vulnerable web applications and network services.
Probably the most modern and sophisticated insecure web application - Written by @bkimminich and the @owasp_juiceshop team.
WebGoat is a deliberately insecure application by OWASP for training purpose
Damn Vulnerable Web Application (DVWA) is a PHP/MySQL web application that is damn vulnerable.
Damn Small Vulnerable Web (DSVW) is a deliberately vulnerable web application written in under 100 lines of code, created for educational purposes.
A modular deliberately vulnerable application designed primarily for validating and benchmarking security scanners through reproducible test scenarios, while also supporting learning and experimentation.
XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
completely ridiculous API: crAPI will help you to understand the ten most critical API security risks. crAPI is vulnerable by design, but you'll be able to safely run it to educate/train yourself.