Resources

Courses

Offensive Security - OSWE

Vulnerable Practice Machines

Chat.JS - Vulnerable NodeJS Web-App to practice NoSQLi and Deserialization exploitation TESTR - Vulnerable Python Web-App to practice XSS and Command Injection TUDO - A vulnerable PHP Web Application. ORDER - A small Python web-app to practice blind SQLi in order by

Checklists

SonarSource static code analysis