bugtraq - OWASP Vulnerable Web Applications Directory Project

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Fri, 18 Oct 2013 16:04:11 +0100
From: psiinon <psiinon@...il.com>
To: bugtraq@...urityfocus.com,
  "websecurity@...appsec.org" <websecurity@...appsec.org>,
  webappsec@...urityfocus.com
Subject: OWASP Vulnerable Web Applications Directory Project

The OWASP Vulnerable Web Applications Directory (VWAD) Project is a
comprehensive and well maintained registry of all known vulnerable web
applications currently available. These vulnerable web applications
can be used by web developers, security auditors and penetration
testers to put in practice their knowledge and skills during training
sessions (and especially afterwards), as well as to test at any time
the multiple hacking tools and offensive techniques available, in
preparation for their next real-world engagement.

The main goal of VWAD is to provide a list of vulnerable web
applications available to security professionals for hacking and
offensive activities, so that they can attack realistic web
environments... without going to jail :)

The vulnerable web applications have been classified in three
categories: On-Line, Off-Line, and VMs/ISOs. Each list has been
ordered alphabetically.

An initial list that inspired this project was maintained till the end
on 2013 at: http://blog.taddong.com/2011/10/hacking-vulnerable-web-applications.html.

Please let me know if there are any mistakes or omissions, or if you
have any suggestions for ways it could be improved.

Simon

-- 
OWASP ZAP Project leader