VulnerableApp icon indicating copy to clipboard operation
VulnerableApp copied to clipboard

OWASP VulnerableApp Project: For Security Enthusiasts by Security Enthusiasts.

Results 92 VulnerableApp issues
Sort by recently updated
recently updated
newest added
trafficstars

**Is your feature request related to a problem? Please describe.** Current implementation of ZAP and VulnerableApp integration has few issues related to scoring due to different designs of both the...

enhancement
design-document
Analysis
Integration

While going through vulnerability descriptions, found that they are not proper and needs a revisit. Need to separate out where the value was found ie cookie or url or other...

enhancement
good first issue
design-document
Framework-changes
Analysis

**Is your feature request related to a problem? Please describe.** Adding Data uri based xss e.g. data:text/html,alert('hi'); **Describe the solution you'd like** As XSS vulnerability is already there. it would...

documentation
enhancement
good first issue
Framework-changes
Analysis

**Is your feature request related to a problem? Please describe.** Currently we have added XSS but that is only the usecase of Reflected XSS but there is no Persistent XSS...

enhancement
good first issue
Framework-changes
Analysis
Thinking New

**Is your feature request related to a problem? Please describe.** There is one usecase we got from the https://github.com/zaproxy/zap-extensions/pull/2443 where untrusted input is part of Path Param so we need...

enhancement
good first issue
Minor-Enhancement

**Is your feature request related to a problem? Please describe.** As VulnerableApp is currently not localised and all the messages are in English. This task is to localize the messages....

documentation
enhancement
good first issue
Localization

Hi!, I was working on the issue #286 I added the Local File Inclusion to the project: ![image](https://user-images.githubusercontent.com/42753018/124198966-7bfc9600-da97-11eb-9dfb-55e734ccd05f.png) It has two level: 1. Direct url param injection 2. Direct url...

**Is your feature request related to a problem? Please describe.** We currently have some 10 vulnerability types but because they are written long back hence they either miss out on...

enhancement
good first issue
Refactor
Tech-Debt
Analysis
P0

**Is your feature request related to a problem? Please describe.** As we have moved towards the new UI which is provided by Owasp VulnerableApp Facade hence we need to update...

documentation
good first issue
design-document
Minor-Enhancement

**Is your feature request related to a problem? Please describe.** Hi! I was wondering whether a translation of the README to pt-br is worthy. I can do this and I...

documentation
good first issue
Analysis