digininja / DVWA

A deliberately vulnerable PHP/MariaDB web app for practicing common web security flaws across adjustable difficulty levels.

PrivateBin / PrivateBin

A self-hostable pastebin that encrypts pastes in the browser with AES-256 so the server never sees plaintext.