How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
sqli-labs is a collection of intentionally vulnerable web applications and sandbox environments designed for practicing the identification and exploitation of SQL injection vulnerabilities. It serves as a cybersecurity education lab where users can experiment with database exploits in a controlled setting. The environment provides specialized modules for testing a wide range of attack vectors, including error-based, boolean-blind, and time-based injections. It specifically covers advanced techniques such as second-order injections, stacked queries, and attacks targeting HTTP headers. The pro
A very vulnerable web site written in NodeJS with the purpose of have a project with identified vulnerabilities to test the quality of security analyzers tools tools
WackoPicko is a vulnerable web application used to test web application vulnerability scanners.
A collection of web pages, vulnerable to command injection flaws
The main features of commixproject/commix-testbed are: Vulnerable Web Applications.
Open-source alternatives to commixproject/commix-testbed include: audi-1/sqli-labs — sqli-labs is a collection of intentionally vulnerable web applications and sandbox environments designed for… bkimminich/juice-shop. cr0hn/vulnerable-node — A very vulnerable web site written in NodeJS with the purpose of have a project with identified vulnerabilities to… cspf-founder/javavulnerablelab — Vulnerable Java based Web Application. digininja/dvwa — DVWA is a vulnerable web application lab and penetration testing sandbox designed to simulate common security flaws.… adamdoupe/wackopicko — WackoPicko is a vulnerable web application used to test web application vulnerability scanners.