Mutillidae 2.6.0 released - Web Pentesting Application

New feature: Video tutorials embedded in Hints; Additional exploit examples; Git & Zip; OWASP Mutillidae II is a free, open source, ...

OWASP_Broken_Web_Apps_VM_1.1 released - collection of vulnerable web applications on Virtual Machine

Open Web Application Security Project (OWASP) Broken Web Applications Project, a collection of vulnerable web applications that is distrib...

Web Application Firewall (WAF) Testing Framework - Find Out If Your Application Security Controls Work

Imperva has developed a free evaluation toolkit that enables you to test your application security solution—your Web application firewall or...

UPDATE NOWASP mutillidae- v2.4.5 - Web Pen-Test Practice Application

NOWASP (Mutillidae) is a free, open source, deliberately vulnerable web-application providing a target for web-security enthusiest. NOWA...

Update NOWASP (Mutillidae) v2.4.1 - Web Pen-Test Practice Application

NOWASP (Mutillidae) is a free, open source, deliberately vulnerable web-application providing a target for web-security enthusiest. NOWA...

OWASP Mantra Security Toolkit 0.92 beta Janus released

OWASP Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration...

bWAPP - an extremely buggy web application !

bWAPP or a buggy web application is a free and open source web application build to allow security enthusiasts, students and developers to...

NOWASP (Mutillidae) 2.3.14 - Web Pen-Test Practice Application

NOWASP (Mutillidae) is a free, open source, deliberately vulnerable web-application providing a target for web-security enthusiest. NOWASP...

hackmecredit - Vulnerable Web Application for testing

This project is very good for training web penetration testing (OWASP TOP 10 Vulnerabilities). The best way to install my vulnerable appli...

NETinVM - Tool for teaching and learning about systems, networks and security

NETinVM is a single  VMware  or  VirtualBox  virtual machine image that contains, ready to run, a series of  User-mode Linux  (UML) vir...

PyLoris - A protocol agnostic application layer denial of service attack.

PyLoris is a scriptable tool for testing a server's vulnerability to connection exhaustion denial of service (DoS) attacks. PyLoris can ...