
mutillidae
OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an…

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an…

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

OWASP Vulnerable Web Application Project https://github.com/hummingbirdscyber

The Web Application Hacker's Handbook - Extra Content

Web application vulnerability scanner

Deliberately vulnerable Flask web application with 22 security flaws across 3 difficulty levels for hands-on penetration testing and web security…

A guided mutation-based fuzzer for ML-based Web Application Firewalls

Software for fuzzing, used on web application pentestings.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

Intentionally vulnerable web application covering OWASP Top 10 vulnerabilities for security training, CTF competitions, and penetration testing…

Intentionally vulnerable PHP/MariaDB web application for practicing common web security vulnerabilities across multiple difficulty levels in a legal,…

Deliberately vulnerable web application with interactive lessons and challenges for learning web application security and penetration testing…

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based…

Curated list of web application security resources including books, tools, cheat sheets, labs, and courses for learning penetration testing and…

Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

Go-based Web Application Firewall library compatible with ModSecurity SecLang rules and OWASP Core Rule Set v4, providing real-time HTTP traffic…