Awesome GitHub RepositoriesVulnerable Web Applications

यह प्रोजेक्ट तकनीकी ज्ञान और प्रशासनिक संसाधनों की एक केंद्रीकृत, समुदाय-संचालित रिपॉजिटरी के रूप में कार्य करता है। यह एक संरचित वर्गीकरण प्रदान करता है जो अलग-अलग जानकारी को एक खोजने योग्य फ्रेमवर्क में एकत्रित करता है, जो सिस्टम प्रशासकों और साइबर सुरक्षा चिकित्सकों के लिए निरंतर सीखने और त्वरित समस्या-समाधान का समर्थन करता है। आक्रामक सुरक्षा, इंफ्रास्ट्रक्चर प्रबंधन और सॉफ्टवेयर विकास में संसाधनों को मैप करके, यह कौशल अधिग्रहण और पेशेवर संदर्भ के लिए एक एकीकृत पथ प्रदान करता है। प्रोजेक्ट को कमांड-लाइन-फर्स्ट डिज़ाइन दर्शन द्वारा परिभाषित किया गया है, जो कुशल सिस्टम प्रशासन और दोहराने योग्य सुरक्षा वर्कफ़्लो की सुविधा के लिए टर्मिनल-आधारित यूटिलिटी और स्क्रिप्ट करने योग्य इंटरफ़ेस को प्राथमिकता देता है। यह एक प्लेटफ़ॉर्म-अज्ञेयवादी दृष्टिकोण के माध्यम से खुद को अलग करता है, दस्तावेज़ीकरण और परिचालन मार्गदर्शिकाएं बनाए रखता है जो विविध Unix-जैसे और क्लाउड-आधारित वातावरणों में लागू रहती हैं। यह मॉड्यूलर टूलचेन एकीकरण उपयोगकर्ताओं को विशिष्ट प्रशासनिक या सुरक्षा कार्यों के लिए तैयार किए गए कस्टम वातावरण बनाने की अनुमति देता है। रिपॉजिटरी सिस्टम ऑडिटिंग, नेटवर्क प्रबंधन और इंफ्रास्ट्रक्चर हार्डनिंग के लिए व्यापक टूलकिट सहित क्षमताओं के एक व्यापक क्षेत्र को कवर करती है। यह साइबर सुरक्षा कौशल विकास के लिए संरचित शिक्षण पथ प्रदान करती है, जो एथिकल हैकिंग लैब और पेनेट्रेशन टेस्टिंग मानकों से लेकर भेद्यता मूल्यांकन और सिस्टम कॉन्फ़िगरेशन सर्वोत्तम प्रथाओं तक फैली हुई है। संग्रह में उत्पादकता टूल, डायग्नोस्टिक यूटिलिटी और शैक्षिक सामग्रियों की एक विस्तृत श्रृंखला भी शामिल है जिसे नियमित रखरखाव को सुव्यवस्थित करने और समग्र सुरक्षा स्थिति को बढ़ाने के लिए डिज़ाइन किया गया है।

DVWA is a vulnerable web application sandbox and PHP security training environment. It serves as a deployable penetration testing target and an OWASP Top 10 lab designed for practicing exploits and simulating common web security vulnerabilities. The application allows users to adjust security difficulty levels to match their skill level and toggle between different SQL database engines to test how various systems handle injection attacks. It includes a mechanism to disable authentication, enabling automated security tools to interact directly with the environment. The project provides capabi

DVWA is a vulnerable web application lab and penetration testing sandbox designed to simulate common security flaws. It serves as a training platform for the OWASP Top 10 security risks and functions as a PHP and MySQL security lab for practicing the identification and exploitation of web vulnerabilities. The project provides a graduated learning experience through configurable security levels that adjust the difficulty of the vulnerabilities. It also supports switching between different database engines to research how various storage systems respond to injection attacks. The application is

This project serves as a comprehensive cybersecurity training platform and resource repository focused on web application security. It functions as a centralized hub for security practitioners, providing both a curated collection of technical documentation and research, and a system for deploying isolated, containerized environments to practice security analysis and exploitation techniques. The platform distinguishes itself by integrating automated data aggregation with hands-on, container-based orchestration. It maintains a current knowledge base of industry research and digital threats whil

Juice Shop is a self-contained web application designed as a platform for cybersecurity education and security training. It functions as a controlled environment containing intentional security flaws, allowing users to practice offensive security techniques and defensive coding practices while tracking their progress through a live scoreboard. The platform serves as an industry-standard benchmark for evaluating the effectiveness and detection accuracy of automated security scanning tools. By hosting a standardized set of known vulnerabilities and common attack patterns, it provides a reliable

Xray is a security assessment tool focused on web vulnerability scanning, attack surface mapping, and technology fingerprinting. It identifies common security flaws through automated scanning and semantic analysis, while verifying findings via a custom proof-of-concept execution engine. The system distinguishes itself with a containerized vulnerability testbed used to deploy pre-configured vulnerable applications. This environment allows for the simulation of specific vulnerabilities and edge-case scenarios to validate scanner accuracy and eliminate false positives. The platform covers a bro

WebGoat is a deliberately insecure web application designed as an interactive security lab for learning how to identify and exploit common web vulnerabilities. It serves as a containerized sandbox that allows for the simulation and experimentation of web-based attacks and penetration testing techniques without risking production systems. The project functions as a learning lab that maps specific insecure coding patterns to structured lessons. It implements simulated server-side flaws to provide a hands-on environment for studying common security vulnerabilities and defensive coding practices.

w3af is a web penetration testing suite and security audit framework designed to identify and exploit vulnerabilities in web applications. It functions as a vulnerability scanner that crawls targets to find injection points and a fuzzer used to discover hidden endpoints and test input validation. The project distinguishes itself by providing an intercepting HTTP proxy for capturing and modifying traffic, combined with a knowledge-base driven exploitation system. It enables the execution of security exploits to gain remote shell access and supports post-exploitation activities, such as routing

Pikachu is a web security training platform and vulnerable web application sandbox. It provides a containerized lab environment designed for practicing penetration testing and identifying common security flaws. The project serves as an OWASP Top 10 practice lab, offering a simulation suite for critical risks. It includes specific scenarios for practicing the exploitation of SQL injection, cross-site scripting, remote code execution, and broken access control. The environment covers a broad range of security testing simulations, including directory traversal, server-side request forgery, unsa

Maskphish is a comprehensive security toolkit that integrates capabilities for digital forensics, network vulnerability scanning, open-source intelligence, penetration testing, and social engineering. It functions as a multi-purpose framework for automating reconnaissance and executing security audits across diverse network environments. The project features a specialized phishing and social engineering toolkit used for cloning websites, masking URLs, and deploying deceptive pages to capture user credentials. It also includes a remote access Trojan builder for generating platform-specific exe