Vulnerable API for research and education
-
Updated
Feb 25, 2026 - C#
Vulnerable API for research and education
Vulnerable FastAPI in reference to Opensource Web Application Security Project (OWASP) TOP 10: 2021
ThreatByte is a vulnerable Python (Flask) web application designed to demonstrate some Web Application and API Security risks.
Run 28 deliberately vulnerable labs (OWASP Juice Shop, DVWA, WebGoat, crAPI, DVGA, Security Shepherd and more) in Docker from one TUI. Labs run isolated with resource limits, and can be picked by vulnerability topic.
Erlik 2 - Vulnerable-Flask-App
A multi-industry vulnerable attack surface with 450+ real API endpoints and 12 web apps
Demo API with async workflows, state transitions, eventual consistency, and fake detonation — built to test Burp Suite extensions. REST, GraphQL, XML. FastAPI.
Praktek API Penetration Testing menggunakan Vulnerable API Vampi
CyberWise-Lab Masterclass práctica de DevSecOps: desde la creación de una API FastAPI vulnerable hasta su despliegue seguro. Aprende hacking ético, observabilidad con Prometheus/Grafana, auditoría en ELK y automatización CI/CD con GitHub Actions. Incluye gestión de contenedores Docker, publicación en Docker Hub y técnicas reales de mitigación media
To associate your repository with the vulnerable-api topic, visit your repo's landing page and select "manage topics."