-
wrongsecrets Public
Forked from OWASP/wrongsecretsVulnerable app with examples showing how to not use secrets
Java GNU Affero General Public License v3.0 UpdatedOct 7, 2025 -
cloudgoat Public
Forked from RhinoSecurityLabs/cloudgoatCloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
Python BSD 3-Clause "New" or "Revised" License UpdatedSep 18, 2025 -
cnappgoat Public
Forked from tenable/cnappgoatCNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.
Go Apache License 2.0 UpdatedSep 4, 2024 -
cfngoat Public
Forked from bridgecrewio/cfngoatCfngoat is Bridgecrew's "Vulnerable by Design" Cloudformation repository. Cfngoat is a learning and training project that demonstrates how common configuration errors can find their way into produc…
UpdatedAug 5, 2024