Repositories list

• rails-goof

  Public
  Vulnerable Ruby on Rails Application

  HTML

  •

  MIT License

  •743•0•0•34•Updated Jul 22, 2025Jul 22, 2025

• ruby-goof

  Public
  Vulnerable Ruby Application

  Ruby

  •133•0•0•25•Updated Jul 22, 2025Jul 22, 2025

• java-monorepo-goof

  Public
  Vulnerable Java Monorepo

  Java

  •

  Educational Community License v2.0

  •987•0•0•474•Updated Jul 22, 2025Jul 22, 2025

• nodejs-goof

  Public
  Vulnerable NodeJS Application

  JavaScript

  •

  Apache License 2.0

  •3.2k•0•0•67•Updated Jul 20, 2025Jul 20, 2025

• kotlin-goof

  Public
  Vulnerable Kotlin Application

  Kotlin

  •

  GNU General Public License v3.0

  •158•0•0•18•Updated Jul 18, 2025Jul 18, 2025

• juice-shop-goof

  Public
  Vulnerable Typescript Application

  pci

  TypeScript

  •

  MIT License

  •14k•2•0•34•Updated Jul 18, 2025Jul 18, 2025

• serverless-spring-goof

  Public
  Vulnerable Serverless Spring Java Application

  Java

  •82•0•0•130•Updated Jul 16, 2025Jul 16, 2025

• JavaCoffeeShop

  Public
  Java

  •

  Apache License 2.0

  •109•0•0•19•Updated Jul 13, 2025Jul 13, 2025

• java-goof

  Public
  Vulnerable Java Application

  Java

  •1.3k•0•0•55•Updated Jul 13, 2025Jul 13, 2025

• pygoat

  Public
  intentionally vuln web Application Security in django

  HTML

  •1k•0•0•23•Updated Jun 20, 2025Jun 20, 2025

• infrastructure-as-code-goof

  Public
  Vulnerable Infrastructure as Code Applications

  pci

  HCL

  •

  Other

  •199•0•0•61•Updated Jun 19, 2025Jun 19, 2025

• python-goof

  Public
  Vulnerable Python Application

  170•0•0•29•Updated Jun 19, 2025Jun 19, 2025

• c-goof

  Public
  Vulnerable C++ Application

  Makefile

  •

  Apache License 2.0

  •139•0•0•7•Updated Jun 13, 2025Jun 13, 2025

• dot-net-goof

  Public
  Vulnerable .NET Application

  C#

  •200•0•0•1•Updated Apr 24, 2025Apr 24, 2025

• patch-mutual

  Public
  Java

  •

  Apache License 2.0

  •5•0•0•0•Updated Mar 19, 2025Mar 19, 2025

• go-goof

  Public
  Vulnerable Go Application

  Dockerfile

  •169•0•0•0•Updated Jan 9, 2025Jan 9, 2025

• kubernetes-goof

  Public
  Vulnerable Kubernetes Application

  Shell

  •87•0•0•6•Updated Jan 8, 2025Jan 8, 2025

• llm-ai-security-demo

  Public
  JavaScript

  •

  Other

  •10•0•0•24•Updated Dec 12, 2024Dec 12, 2024

• snyk-boot-web

  Public
  Java

  •164•0•0•1•Updated Nov 12, 2024Nov 12, 2024

• cpp-goof

  Public
  Vulnerable C++ Application

  C

  •99•0•0•6•Updated Oct 3, 2024Oct 3, 2024

• vulnerable-java-application

  Public
  This repository contains a sample Java application vulnerable to command injection and server-side request forgery (SSRF).

  Java

  •

  Apache License 2.0

  •98•0•0•0•Updated Jun 18, 2024Jun 18, 2024

• dot-net-web-goof

  Public
  Vulnerable .NET Web Application

  C#

  •669•0•0•0•Updated Apr 24, 2024Apr 24, 2024

• docker-goof

  Public
  Vulnerable Docker Application

  Shell

  •555•0•0•0•Updated Apr 23, 2024Apr 23, 2024

• ios-goof

  Public
  Vulnerable iOS Application

  C

  •

  GNU General Public License v3.0

  •197•0•0•0•Updated Apr 23, 2024Apr 23, 2024

• vulnado

  Public
  Purposely vulnerable Java application to help lead secure coding workshops

  Java

  •

  Other

  •787•0•0•7•Updated Apr 23, 2024Apr 23, 2024

• php-goof

  Public
  Vulnerable PHP Application

  96•0•0•0•Updated Apr 22, 2024Apr 22, 2024

• terraform-goof

  Public
  Vulnerable Terraform Application

  HCL

  •289•0•0•0•Updated Apr 22, 2024Apr 22, 2024

• go-web-goof

  Public
  Vulnerable Go Web Application

  Go

  •310•0•0•0•Updated Apr 22, 2024Apr 22, 2024

• gradle-goof

  Public
  Vulnerable Gradle Application

  Java

  •16•0•0•0•Updated Apr 18, 2024Apr 18, 2024

• spring.goof

  Public
  Java

  •27•0•0•0•Updated Jun 20, 2022Jun 20, 2022