redteamfortress / KillerLand
Collection of reversed vulnerable drivers weaponized into process killers. PPL won't save you.
redteamfortress / KillerLand
juice-shop / juice-shop
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
vulhub / vulhub
Pre-Built Vulnerable Environments Based on Docker-Compose
digininja / DVWA
Damn Vulnerable Web Application (DVWA)
ossf / cve-bin-tool
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
webpwnized / mutillidae
OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.
Commando-X / vuln-bank
A deliberately vulnerable banking application designed for practicing Security Testing of Web App, APIs, AI integrated App and secure code reviews. Features common vulnerabilities found in real-world applications, making it an ideal platform for security professionals, developers, and enthusiasts to learn pentesting and secure coding practices.
actions / dependency-review-action
A GitHub Action for detecting vulnerable dependencies and invalid licenses in your PRs
oversecured / ovaa
Oversecured Vulnerable Android App
rubysec / ruby-advisory-db
A database of vulnerable Ruby Gems
RetireJS / retire.js
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
RhinoSecurityLabs / cloudgoat
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
splunk / attack_range
A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk
BullsEye0 / google_dork_list
Google Dorks | Google helps you to find Vulnerable Websites that Indexed in Google Search Results. Here is the latest collection of Google Dorks. A collection of 13.760 Dorks. Author: Jolanda de Koff
vavkamil / awesome-vulnerable-apps
Awesome Vulnerable Applications
OWASP / wrongsecrets
Vulnerable app with examples showing how to not use secrets
fkie-cad / cwe_checker
cwe_checker finds vulnerable patterns in binary executables
BullsEye0 / dorks-eye
Dorks Eye Google Hacking Dork Scraping and Searching Script. Dorks Eye is a script I made in python 3. With this tool, you can easily find Google Dorks. Dork Eye collects potentially vulnerable web pages and applications on the Internet or other awesome info that is picked up by Google's search bots. Author: Jolanda de Koff
OWASP / OWASP-VWAD
:warning: This repo is no longer in use. Please refer to https://vwad.owasp.org
nicholasaleks / Damn-Vulnerable-Drone
Damn Vulnerable Drone is an intentionally vulnerable drone hacking simulator based on the popular ArduPilot/MAVLink architecture, providing a realistic environment for hands-on drone hacking.
aboutcode-org / vulnerablecode
A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/
dependency-check / dependency-check-sonar-plugin
Integrates Dependency-Check reports into SonarQube
The-Art-of-Hacking / websploit
This is a learning created by Omar Santos (@santosomar) for different Cybersecurity training sessions. It includes many intentionally vulnerable applications running in Docker containers and thousands of cybersecurity resources.
snyk-labs / nodejs-goof
Super vulnerable todo list application
DeathShotXD / 0xM0nCrush
Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.
Tcotl / DVLAA
DVLAA (Damn Vulnerable LLM and Agent Application) is a local LLM and Agent security range for OWASP LLM Top 10 and Agent security training.
TAKU-ZE / mobile-trust-lab
An Android security research lab for analyzing client trust boundaries, insecure local state, exported components, and runtime integrity controls. Includes a purpose-built vulnerable app, static APK checks, Frida instrumentation, reproducible findings, and validated remediations.
ressl / cve-2026-87902-poc
PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab
DeathShotXD / 0xCr0ssCrush
Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opportunities.
pranjalm37 / race-condition-exploiter
TOCTOU race condition research toolkit: vulnerable/patched samples, a CLI race harness, an AST-based scanner, and a live demo
R41N3RZUF477 / ps-ppl-bypass
Process Explorer vulnerable driver PPL Bypass
m0m0x01d / strata
See why a web vulnerability works, not just how to trigger it — a single-file, zero-dependency security lab that renders a vulnerable app as a 7-layer cross-section. 17 labs, attacker & defender modes, AI-authorable.
security-attack / RingKiller
RingKiller — BYOD PoC for vulnerable driver DCRCVDrv.sys. Abuses IOCTL 0x2205C0 to kill arbitrary processes from ring 0 via ZwTerminateProcess. EDR/AV termination primitive. Lab only.