#Vulnapp

juice-shop

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

Warxim

vucsa

Vulnerable Client-Server Application (VuCSA) is made for learning how to perform penetration tests of non-http thick clients. It is written in Java (with JavaFX graphical user interface) and contains multiple challenges including SQL injection, RCE, XML vulnerabilities and more.

cyllective

oauth-labs

oauth-labs: an intentionally vulnerable set of OAuth 2.0 labs for security training and learning

hahwul

xssmaze

XSSMaze is a web service designed to test and improve the performance of security testing tools by providing various cases of XSS vulnerabilities.