A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.

Ghidra is a software reverse engineering (SRE) framework

Dex to Java decompiler

Spring Framework

Spring Boot helps you to create Spring-powered, production-grade applications and services with absolute minimum fuss.

Spring Security

Sample code referenced by the .NET documentation

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysi…

Impacket is a collection of Python classes for working with network protocols.

Easy SSL pinning validation and reporting for iOS, macOS, tvOS and watchOS.

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

Application Layer DoS attack simulator

Clone this repo to build Frida

The official Go library for the Cloudflare API

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.

Samples for ASP.NET Core

Binaries for the CodeQL CLI

Nikto web server scanner

Hacx GPT a powerful, evil brother of WormGPT.

C library for prototyping and experimenting with quantum-resistant cryptography

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automa…

Manages, configures, extracts and monitors Microsoft 365 tenant configurations

Universal MCT wrapper script for all Windows 10/11 versions from 1507 to 21H2!

Welcome to the Microsoft Defender for Cloud community repository

Pentest AI utilizes machine learning to fully automate penetration testing and exploitation for assessing port, web, and application security. It creates maps of identified CVEs, maps them into Met…