Tools
mutillidae
webpwnized/mutillidae
OWASP Mutillidae II is a deliberately vulnerable web application used as a hands-on target for learning and practicing web security in labs, classrooms, and CTFs.
Topics
Related projects
WhatWeb7kWhatWeb is a next-generation web scanner that fingerprints websites, identifying CMSs, frameworks, servers, and version details using more than 1,800 plugins.
wazuh17.7kWazuh is an open-source security platform combining XDR and SIEM. Endpoint agents and a management server collect and analyze logs to deliver intrusion detection, file integrity monitoring, vulnerability detection, configuration assessment and incident response across on-premises and cloud workloads.
crowdsec15.6kCrowdSec is an open-source IDS/IPS, WAF and bot-detection engine. It analyzes logs and HTTP requests, triggers remediation through firewall and proxy components, and shares a crowdsourced blocklist of malicious IPs so one attack protects the whole community.
juice-shop14.4kOWASP Juice Shop is a deliberately insecure web application covering the OWASP Top 10 and many real-world flaws. It serves as a training target for security awareness, CTF events and tool testing, and can be run locally via npm, Docker or packaged distributions.
DVWA14kDamn Vulnerable Web Application (DVWA) is a deliberately vulnerable PHP and MariaDB web app for practicing common web vulnerabilities at several difficulty levels. It is widely used by security professionals, students and teachers for legal, hands-on security training.
opencti10.4kAn open-source cyber threat intelligence platform for structuring, storing and visualizing threat knowledge based on STIX2 standards.