Repositories list

• juice-shop

  Public
  OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

  TypeScript

  •

  MIT License

  •17k•0•0•1•Updated Sep 12, 2025Sep 12, 2025

• terragoat

  Public
  TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration e…

  HCL

  •

  Apache License 2.0

  •5.7k•0•0•6•Updated Dec 15, 2024Dec 15, 2024

• kubernetes-goat

  Public
  Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

  HTML

  •

  MIT License

  •958•0•0•1•Updated Dec 15, 2024Dec 15, 2024

• cicd-goat

  Public
  A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

  Python

  •

  Apache License 2.0

  •389•0•0•23•Updated Nov 28, 2023Nov 28, 2023

• WebGoat

  Public
  WebGoat is a deliberately insecure application

  JavaScript

  •

  Other

  •7.4k•0•0•10•Updated Nov 27, 2023Nov 27, 2023

• NodeGoat

  Public
  The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effecti…

  HTML

  •

  Apache License 2.0

  •2.3k•0•0•4•Updated Oct 10, 2023Oct 10, 2023

• github-actions-goat

  Public
  GitHub Actions Goat: Deliberately Vulnerable GitHub Actions CI/CD Environment

  JavaScript

  •

  Apache License 2.0

  •303•0•0•0•Updated Sep 25, 2023Sep 25, 2023

• .github

  Public
  0•0•0•0•Updated Sep 25, 2023Sep 25, 2023

• spectral-goat

  Public
  Vulnerable by design testbed repository for Spectral scanner.

  Jupyter Notebook

  •131•0•0•1•Updated Sep 25, 2023Sep 25, 2023

• metarget

  Public
  Metarget is a framework providing automatic constructions of vulnerable infrastructures.

  Python

  •

  Apache License 2.0

  •199•0•0•0•Updated Mar 13, 2023Mar 13, 2023