Metasploitable3 is an automated virtual machine provisioner designed to build and deploy operating system images with intentional security weaknesses. It functions as a penetration testing lab by creating vulnerable virtual machine targets used for security training, exploit development, and the validation of security tools. The system uses configuration scripts to inject vulnerabilities into Windows and Linux environments. This includes the deployment of insecure applications and services, such as web servers and databases, and the application of misconfigured system permissions to simulate
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
WebGoat is a deliberately insecure web application designed as an interactive security lab for learning how to identify and exploit common web vulnerabilities. It serves as a containerized sandbox that allows for the simulation and experimentation of web-based attacks and penetration testing techniques without risking production systems. The project functions as a learning lab that maps specific insecure coding patterns to structured lessons. It implements simulated server-side flaws to provide a hands-on environment for studying common security vulnerabilities and defensive coding practices.
The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.
owasp/nodegoat 的主要功能包括：Vulnerability Environments, Web Security Tools, Security Education, Vulnerability Training, Vulnerable Test Targets, Vulnerable Applications, Vulnerable Systems。
owasp/nodegoat 的开源替代品包括： bkimminich/juice-shop. webgoat/webgoat — WebGoat is a deliberately insecure web application designed as an interactive security lab for learning how to… zaproxy/zaproxy — OWASP ZAP is a dynamic application security testing tool and intercepting HTTP proxy used to find vulnerabilities in… cider-security-research/cicd-goat — A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges. rapid7/metasploitable3 — Metasploitable3 is an automated virtual machine provisioner designed to build and deploy operating system images with… digininja/dvwa — DVWA is a vulnerable web application lab and penetration testing sandbox designed to simulate common security flaws.…