OWASP Juice Shop

• juice-shop

  7 8,083 9.6 TypeScript

  OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

  

  This is awesome! Convenient for folks who use the Express/Angular stack but conceptual stuff should be pretty universal regardless.

  Wasn't aware of this project at all but found the following links useful for context:

  The actual Juice Shop website can be found at https://juice-shop.herokuapp.com/#/

  and the github link for viewing code is https://github.com/juice-shop/juice-shop/releases/

• damn-vulnerable-js-sca

  1 12 10.0 JavaScript

  An intentionally vulnerable Javascript app containing notable vulnerabilities in its dependencies.

  

  We've been working on an example vulnerable app to showcase vulnerable dependencies in web apps. (Think a CVE in an NPM package.)

  I've been wanting that so that I can test out different security scanning and patching tools, but also actually build a test playground to exploit vulnerable dependencies. (I want to accelerate exploit development for CVEs by making it more standardized.)

  If you have a CVE that you'd like to write a POC exploit scenario for, you can add it to this project quickly and easily with pre-built templates[1]! (Wasp[2] is an awesome project that simplifies web dev tooling complexity.)

  Are there any other projects with similar goals that anybody is aware of? Asking because I couldn't find any, but I'd love to merge efforts if somebody is already doing this!

  0: https://github.com/lunasec-io/damn-vulnerable-js-sca

  1: https://github.com/lunasec-io/damn-vulnerable-js-sca/tree/ma...

  2: https://wasp-lang.dev/

• Appwrite

  appwrite.io

  sponsored

  Appwrite - The Open Source Firebase alternative introduces iOS support . Appwrite is an open source backend server that helps you build native iOS applications much faster with realtime APIs for authentication, databases, files storage, cloud functions and much more!

  

• wasp

  100 2,797 9.7 Haskell

  The fastest way to develop full-stack web apps with React & Node.js.

  

  We've been working on an example vulnerable app to showcase vulnerable dependencies in web apps. (Think a CVE in an NPM package.)

  I've been wanting that so that I can test out different security scanning and patching tools, but also actually build a test playground to exploit vulnerable dependencies. (I want to accelerate exploit development for CVEs by making it more standardized.)

  If you have a CVE that you'd like to write a POC exploit scenario for, you can add it to this project quickly and easily with pre-built templates[1]! (Wasp[2] is an awesome project that simplifies web dev tooling complexity.)

  Are there any other projects with similar goals that anybody is aware of? Asking because I couldn't find any, but I'd love to merge efforts if somebody is already doing this!

  0: https://github.com/lunasec-io/damn-vulnerable-js-sca

  1: https://github.com/lunasec-io/damn-vulnerable-js-sca/tree/ma...

  2: https://wasp-lang.dev/

Suggest a related project