Damn Vulnerable Java (EE) Application

Work In Progress

Gitbook documentation repo.

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into product…

KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

Cfngoat is Bridgecrew's "Vulnerable by Design" Cloudformation repository. Cfngoat is a learning and training project that demonstrates how common configuration errors can find their way into produc…

AWSGoat : A Damn Vulnerable AWS Infrastructure

Damn Vulnerable C# Application (API)

CdkGoat is Bridgecrew's "Vulnerable by Design" AWS CDK repository. CdkGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cl…

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

🔐 Password Pusher is an application to securely communicate passwords over the web. Passwords automatically expire after a certain number of views and/or time has passed.

Super vulnerable todo list application

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Damn Vulnerable NodeJS Application

Modular Application Framework for Blazor

Code and YAML files for Getting Started with Kubernetes video course on Pluralsight

Generates an html report from SonarQube

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

Vulnerable Python Application To Learn Secure Development