A curated list of resources for learning about application security
-
Updated
Feb 22, 2025 - PHP
#
application-security
Here are 18 public repositories matching this topic...
XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
-
Updated
Sep 12, 2020 - PHP
Secure Content Management for the Modern Web - "The sky is only the beginning"
php cms security postgresql free-software secure content-management libsodium cms-airship application-security secure-by-default
-
Updated
Mar 22, 2019 - PHP
Put malicious users, IP addresses and anonymous browser fingerprints under surveillance, log the URLs they visit and block malicious ones from accessing the Laravel app.
php laravel laravel-package cybersecurity application-security access-control hacktoberfest fingerprintjs laravel-security fingerprintjs2 laravel-surveillance hacktoberfest2024
-
Updated
Oct 30, 2021 - PHP
Vulnerable Banking Suite
hacking cybersecurity learn application-security security-vulnerability learning-by-doing mobile-security whitehat vulnerability-assessment ethical-hacking vulnerable-web-app security-testing vulnerable-applications vulnerable-android-apps vulnerable-webserver vulnerable-ios-apps
-
Updated
Aug 6, 2023 - PHP
A simple PHP application to learn SQL Injection detection and exploitation techniques.
exploit sql-injection application-security web-security appsec vulnerable-web-app owasp-top-10 owasp-top-ten vulnerable-apps training-app
-
Updated
Oct 18, 2022 - PHP
this repository is a docker containing some "XSS vulnerability" challenges and bypass examples.
xss owasp penetration-testing xss-vulnerability infosec application-security pentesting xss-exploitation xss-detection xss-attacks input-validation owasp-top-10 owasp-top-ten xss-filter cross-site-scripting appsecurity
-
Updated
May 25, 2022 - PHP
A collection of HTTP middleware classes to improve the security headers in your Laravel application
php http middleware laravel collection backend laravel-package classes application-security security-headers
-
Updated
Mar 13, 2024 - PHP
This repository is a dockerized PHP application containing some file upload vulnerability challenges (scenarios).
security file-upload hacking owasp penetration-testing application-security shellcode exploitation owasp-top-10 owasp-top-ten php-shell malicious-files file-upload-vulnerability remote-command-execution appsecurity upload-vulnerability
-
Updated
Mar 12, 2023 - PHP
This repository is a Dockerized php application containing a LFI (Local File Inclusion) vulnerability which can lead to RCE (Remote Code Execution).
owasp rce application-security lfi owasp-top-10 command-injection lfi-labs lfi-exploitation local-file-inclusion lfi-vulnerability os-command-injection remote-command-execution lfi-detection lfi-rce lfi-exploit lfi-to-rce lfi-to-shell lfi-scenario lfi-challenge
-
Updated
Jun 16, 2022 - PHP
This repository is a dockerized PHP application containing some captcha logical bypass challenges (scenarios).
owasp application-security captcha-solving captcha-breaking bruteforce-attacks owasp-top-10 owasp-top-ten captcha-bypass appsecurity blocking-bypass
-
Updated
May 25, 2022 - PHP
GBS_M183 - Applikationssicherheit implementieren
-
Updated
May 31, 2022 - PHP
A lightweight and powerful package for handling permissions and provisions in Laravel
php security laravel checker permissions roles authorization rbac application-security gatekeeper gate checks keeper
-
Updated
Sep 12, 2023 - PHP
IRWB یک سامانه جامع آموزش عملی امنیت وب اپلیکیشنها به زبان فارسی است که با ارائه چالشها و کارتهای تمرینی در سطوح مختلف، به شما کمک میکند مهارتهای تست نفوذ و شناسایی آسیبپذیریهای رایج وب مثل SQL Injection، XSS، File Inclusion و فیلتر بایپس را به صورت تعاملی و امن تقویت کنید.
sql-injection application-security vulnerability-assessment web-exploitation security-awareness webapp-security red-team-exercises client-side-attacks irwb web-security-training web-application-vulnerabilities file-inclusion-vulnerabilities secure-coding-practice interactive-terminal bug-bounty-preparation cybersecurity-learning irwb-platform web-hacking-tutorials bug-hunting-practice sqli-challenges
-
Updated
Jul 10, 2025 - PHP
Collection of RFI Vulnerability scenarios (challenges) each containing a new bypass technique.
security hacking owasp penetration-testing application-security rfi owasp-top-10 owasp-top-ten rfi-labs app-security remote-file-inclusion rfi-vulnerabillity rfi-exploitation rfi-exploit rfi-scenario rfi-challenge
-
Updated
May 25, 2022 - PHP
Built with Apache, MySQL, PHP, HTML5 and CSS. A simple front and back end app with login to add or remove daily chores from your list. Currently has security for cross site scripting and sql injection. I'll be implementing the rest of the OWASP top 10. Version 1.4.
javascript mysql php html5 css3 mvc-application application-security object-oriented-programming owasp-top-10
-
Updated
Jan 30, 2024 - PHP
a PHP application to disable, destroy or backup PHP applications remotely in special cases.
-
Updated
Jul 7, 2020 - PHP
AppSec, DevSecOps and general cybersec writeups. Content is for educational purposes only.
-
Updated
Oct 23, 2024 - PHP
Improve this page
Add a description, image, and links to the application-security topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the application-security topic, visit your repo's landing page and select "manage topics."