Repositories list

• juice-shop

  Public
  OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

  TypeScript

  •

  MIT License

  •12k•0•0•0•Updated Mar 4, 2025Mar 4, 2025

• terragoat

  Public
  TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

  HCL

  •

  Apache License 2.0

  •5.4k•0•0•6•Updated Dec 15, 2024Dec 15, 2024

• kubernetes-goat

  Public
  Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

  HTML

  •

  MIT License

  •756•0•0•1•Updated Dec 15, 2024Dec 15, 2024

• cicd-goat

  Public
  A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

  Python

  •

  Apache License 2.0

  •337•0•0•23•Updated Nov 28, 2023Nov 28, 2023

• WebGoat

  Public
  WebGoat is a deliberately insecure application

  JavaScript

  •

  Other

  •6k•0•0•10•Updated Nov 27, 2023Nov 27, 2023

• NodeGoat

  Public
  The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

  HTML

  •

  Apache License 2.0

  •1.8k•0•0•4•Updated Oct 10, 2023Oct 10, 2023

• github-actions-goat

  Public
  GitHub Actions Goat: Deliberately Vulnerable GitHub Actions CI/CD Environment

  JavaScript

  •

  Apache License 2.0

  •268•0•0•0•Updated Sep 25, 2023Sep 25, 2023

• .github

  Public
  0•0•0•0•Updated Sep 25, 2023Sep 25, 2023

• spectral-goat

  Public
  Vulnerable by design testbed repository for Spectral scanner.

  Jupyter Notebook

  •134•0•0•1•Updated Sep 25, 2023Sep 25, 2023

• metarget

  Public
  Metarget is a framework providing automatic constructions of vulnerable infrastructures.

  Python

  •

  Apache License 2.0

  •175•0•0•0•Updated Mar 13, 2023Mar 13, 2023