Projects sharing features with Dvws Node

This repository was developed using .NET 7.0 API technology based on findings listed in the OWASP 2019 API Security Top 10.

A simple Node.js Express REST app with some OWASP vulnerabilities.

🐑 Websheep is an app based on a willingly vulnerable ReSTful APIs.

This is vulnerable microservice written in many language to demonstrating OWASP API Top Security Risk (under development)

This is a "Goat" project so you can get familiar with REST API testing. There is an included Postman project so you can see how everything is meant to be called. If you encounter any components of the API which don't work correctly, please create an Issue for them.

Research on GraphQL from an AppSec point of view.

vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.

Damn Vulnerable Restaurant is an intentionally vulnerable Web API game for learning and training purposes dedicated to developers, ethical hackers and security engineers.

Intentionaly very vulnerable API with bonus bad coding practices

Pre-Built Vulnerable Multiple API Scenarios Environments Based on Docker-Compose.