Repositories list

• brokencrystals

  Public
  A Broken Application - Very Vulnerable!

  reactnodejssecurity+ 7

  reactnodejssecuritydevopsbenchmarktypescriptsecopsvulnerablecyber-securitynestjs

  TypeScript

  •

  MIT License

  •313•183•48•47•Updated Mar 6, 2026Mar 6, 2026

• bright-cli

  Public
  Command Line Interface (CLI) tool for BrightSec's solutions.

  apiclisecurity+ 8

  apiclisecuritydevopscrawlertypescriptharsecopsoascyber-security+ 1

  TypeScript

  •

  MIT License

  •10•20•3•0•Updated Mar 6, 2026Mar 6, 2026

• postiz-app-for-star

  Public
  📨 The ultimate social media scheduling tool, with a bunch of AI 🤖

  TypeScript

  •

  GNU Affero General Public License v3.0

  •4.8k•0•0•0•Updated Mar 6, 2026Mar 6, 2026

• sectester-net

  Public
  SecTester is a new tool that integrates our enterprise-grade scan engine directly into your unit tests.

  testingc-sharpsecurity+ 6

  testingc-sharpsecurityqateste2epentestingappsecbrightsec

  C#

  •

  MIT License

  •3•2•3•3•Updated Mar 5, 2026Mar 5, 2026

• juice-shop

  Public
  OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

  TypeScript

  •

  MIT License

  •17k•0•0•8•Updated Mar 4, 2026Mar 4, 2026

• helmcharts

  Public
  Go Template

  •1•2•0•0•Updated Mar 4, 2026Mar 4, 2026

• lila

  Public
  ♞ lichess.org: the forever free, adless and open source chess server ♞

  Scala

  •

  GNU Affero General Public License v3.0

  •2.6k•0•0•8•Updated Mar 3, 2026Mar 3, 2026

• multer

  Public
  Node.js middleware for handling `multipart/form-data`.

  JavaScript

  •

  MIT License

  •1.1k•0•0•3•Updated Mar 2, 2026Mar 2, 2026

• jsPDF

  Public
  Client-side JavaScript PDF generation for everyone.

  JavaScript

  •

  MIT License

  •4.8k•1•0•2•Updated Mar 2, 2026Mar 2, 2026

• sectester-js

  Public
  SecTester is a new tool that integrates our enterprise-grade scan engine directly into your unit tests.

  testingsecurityqa+ 6

  testingsecurityqatypescriptteste2epentestingappsecbrightsec

  TypeScript

  •

  MIT License

  •4•6•3•3•Updated Mar 1, 2026Mar 1, 2026

• vulnerable-graphql-api

  Public
  A very vulnerable implementation of a GraphQL API.

  TypeScript

  •

  MIT License

  •34•0•0•5•Updated Feb 28, 2026Feb 28, 2026

• ruby-example-app

  Public
  A blog written in rails that has many many security vulnerabilities to exploit

  Ruby

  •20•0•0•5•Updated Feb 23, 2026Feb 23, 2026

• class-sanitizer

  Public
  Class-based sanitation in Typescript using decorators

  TypeScript

  •19•5•0•0•Updated Feb 23, 2026Feb 23, 2026

• VAmPI

  Public
  Vulnerable REST API with OWASP top 10 vulnerabilities for security testing

  Python

  •

  MIT License

  •517•0•0•1•Updated Feb 20, 2026Feb 20, 2026

• Damn-Vulnerable-GraphQL-Application

  Public
  Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL Security.

  JavaScript

  •

  MIT License

  •355•0•0•7•Updated Feb 20, 2026Feb 20, 2026

• sqli-lab

  Public
  Dockerized SQLi Simulation Lab based on https://github.com/Audi-1/sqli-labs

  PHP

  •

  MIT License

  •13•1•0•0•Updated Feb 20, 2026Feb 20, 2026

• node-os-service

  Public
  Run Node.JS programs as native Operating System Services.

  JavaScript

  •52•1•0•3•Updated Feb 14, 2026Feb 14, 2026

• Umbraco-CMS-copilot-testing

  Public
  Umbraco is a free and open source .NET content management system helping you deliver delightful digital experiences.

  C#

  •

  MIT License

  •2.9k•0•0•17•Updated Feb 14, 2026Feb 14, 2026

• sectester-js-demo

  Public
  This is a demo project for the SecTester JS SDK framework, with some installation and usage examples.

  testingsecurityqa+ 9

  testingsecurityqademotypescriptjestteste2epentestingappsec+ 2

  TypeScript

  •

  MIT License

  •108•17•1•13•Updated Feb 14, 2026Feb 14, 2026

• cypress-har-generator

  Public
  Cypress plugin for generating HTTP Archive (HAR) files captures network requests during Cypress tests.

  electrontestingqa+ 10

  electrontestingqachromeautomationtypescriptharchromiumtest-automationhttp-archive+ 3

  TypeScript

  •

  MIT License

  •20•86•12•15•Updated Feb 14, 2026Feb 14, 2026

• har-sdk

  Public
  HAR SDK enables Node.js developers to easily work with HAR, convert it from OAS/Swagger and Postman collection, and more.

  convertertypescriptgenerator+ 5

  convertertypescriptgeneratorswaggerharopenapisampleroas

  TypeScript

  •

  MIT License

  •5•13•11•13•Updated Feb 12, 2026Feb 12, 2026

• grafana

  Public
  The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elastics…

  TypeScript

  •

  GNU Affero General Public License v3.0

  •14k•0•0•23•Updated Feb 11, 2026Feb 11, 2026

• WebGoat

  Public
  WebGoat is a deliberately insecure application

  JavaScript

  •

  Other

  •7.4k•0•0•1•Updated Feb 9, 2026Feb 9, 2026

• fastify-realworld-example-app

  Public
  Fastify + Knex.js - Realworld Example App

  copilot-agent-example-app

  copilot-agent-example-app

  JavaScript

  •

  MIT License

  •8•1•0•5•Updated Feb 3, 2026Feb 3, 2026

• go-todoapp-demo

  Public
  HTML

  •

  MIT License

  •5•0•0•6•Updated Jan 29, 2026Jan 29, 2026

• list-entrypoints

  Public
  List entrypoints of a Bright project

  JavaScript

  •

  MIT License

  •0•0•0•3•Updated Jan 23, 2026Jan 23, 2026

• run-discovery

  Public
  Action runs a new discovery in NeuraLegion

  TypeScript

  •

  MIT License

  •0•0•0•7•Updated Jan 23, 2026Jan 23, 2026

• cdp-images

  Public
  🐳 Docker images auto-published to Docker Hub and GitHub Packages

  JavaScript

  •

  MIT License

  •8•0•0•1•Updated Jan 23, 2026Jan 23, 2026

• dvna

  Public
  Damn Vulnerable NodeJS Application

  SCSS

  •

  MIT License

  •868•0•0•4•Updated Jan 22, 2026Jan 22, 2026

• node-raw-socket

  Public
  Raw sockets for Node.js.

  JavaScript

  •71•0•0•0•Updated Jan 18, 2026Jan 18, 2026