Repositories list

• dvca

  Public
  very serious c application which is NOT riddled with bugs

  C

  •0•0•0•0•Updated Feb 4, 2026Feb 4, 2026

• payroll-demo-2

  Public
  Python

  •7•0•0•2•Updated Feb 3, 2026Feb 3, 2026

• clawdbot-stealer-poc

  Public
  POC: Malicious website for stealing session tokens by abusing clawdbot

  HTML

  •

  MIT License

  •0•0•0•0•Updated Feb 2, 2026Feb 2, 2026

• demorepo1-php

  Public
  PHP

  •1•0•0•5•Updated Feb 2, 2026Feb 2, 2026

• Piwigo-PR-scan-clone

  Public
  Manage your photos with Piwigo, a full featured open source photo gallery application for the web. Star us on Github! More than 200 plugins and themes available…

  PHP

  •

  GNU General Public License v2.0

  •466•0•0•104•Updated Jan 15, 2026Jan 15, 2026

• zeropath-mcp-server

  Public
  Open-source MCP server for querying ZeroPath security issues, patches, and scans using Claude, Cursor, Windsurf, or any AI assistant.

  securityappsecsecurity-automation+ 2devsecopsmcp-server

  Python

  •

  MIT License

  •4•7•0•1•Updated Dec 19, 2025Dec 19, 2025

• backstage-plugin

  Public
  TypeScript

  •

  Apache License 2.0

  •0•0•0•0•Updated Dec 17, 2025Dec 17, 2025

• backstage-soundcheck

  Public
  ZeroPath fact collector for Backstage Soundcheck.

  TypeScript

  •0•0•0•0•Updated Dec 17, 2025Dec 17, 2025

• broker

  Public
  ZeroPath Broker

  Shell

  •0•0•0•0•Updated Dec 12, 2025Dec 12, 2025

• juice-shop

  Public
  OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

  TypeScript

  •

  MIT License

  •16k•0•0•0•Updated Nov 6, 2025Nov 6, 2025

• zeropath-vscode-plugin

  Public
  TypeScript

  •

  MIT License

  •0•0•0•0•Updated Oct 7, 2025Oct 7, 2025

• zeropath-cli

  Public
  ZeroPath CLI Releases

  securityvulnerabilitiesappsec+ 2security-toolszeropath

  2•5•0•0•Updated Oct 7, 2025Oct 7, 2025

• juice-shop-demo

  Public
  OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

  TypeScript

  •

  MIT License

  •16k•0•0•1.6k•Updated Aug 14, 2025Aug 14, 2025

• secDevLabs

  Public
  A laboratory for learning secure web and mobile development in a practical manner.

  PHP

  •

  BSD 3-Clause "New" or "Revised" License

  •462•0•0•11•Updated Aug 5, 2025Aug 5, 2025

• prompt_injection_demo

  Public
  Python

  •0•0•0•0•Updated Jul 17, 2025Jul 17, 2025

• secDevLabs-demo

  Public
  A laboratory for learning secure web and mobile development in a practical manner.

  PHP

  •

  BSD 3-Clause "New" or "Revised" License

  •462•0•0•8•Updated Jul 7, 2025Jul 7, 2025

• demorepo-dev

  Public
  Python

  •14•0•0•5•Updated Apr 7, 2025Apr 7, 2025

• juice-shop-forked

  Public
  OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

  TypeScript

  •

  MIT License

  •16k•0•0•0•Updated Feb 2, 2025Feb 2, 2025

• secDevLabs1

  Public
  A laboratory for learning secure web and mobile development in a practical manner.

  PHP

  •

  BSD 3-Clause "New" or "Revised" License

  •462•0•0•3•Updated Feb 1, 2025Feb 1, 2025

• HelloShiftLeft-Scala

  Public
  Scala

  •40•0•0•1•Updated Dec 23, 2024Dec 23, 2024

• Simple-Web-Server-cpp

  Public
  A very simple, fast, multithreaded, platform independent HTTP and HTTPS server and client library implemented using C++11 and Boost.Asio. Created to be an easy …

  C++

  •

  MIT License

  •769•0•0•0•Updated Dec 23, 2024Dec 23, 2024

• ft_irc

  Public
  Our own IRC server in C++, fully compatible with an official client.

  C++

  •4•0•0•0•Updated Dec 10, 2024Dec 10, 2024

• validation-benchmarks

  Public
  XBOW Validation Benchmarks -- Forked by ZeroPath

  PHP

  •

  Apache License 2.0

  •149•7•0•0•Updated Dec 6, 2024Dec 6, 2024

• Damn_Vulnerable_C_Program

  Public
  An example C program which contains vulnerable code for common types of vulnerabilities. It can be used to show fuzzing concepts.

  Rust

  •181•0•0•0•Updated Oct 19, 2024Oct 19, 2024

• juice-shop-example-2

  Public
  OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

  TypeScript

  •

  MIT License

  •16k•0•0•1•Updated Oct 7, 2024Oct 7, 2024

• Vulnerable-Code-Snippets

  Public
  A small collection of vulnerable code snippets

  PHP

  •786•0•0•0•Updated Sep 30, 2024Sep 30, 2024

• UpTrain-RCE-PoC

  Public
  Proof-of-concept exploit for UpTrain RCE vulnerability

  Python

  •0•0•0•0•Updated Aug 23, 2024Aug 23, 2024

• Clone-voice-RCE-PoC

  Public
  Proof-of-concept exploit for clone-voice RCE vulnerability

  Python

  •0•1•0•0•Updated Aug 23, 2024Aug 23, 2024

• LibrePhotos-Arbitrary-File-Upload-PoC

  Public
  Proof-of-concept exploit for LibrePhotos unauthenticated file upload vulnerability

  Python

  •0•0•0•0•Updated Aug 23, 2024Aug 23, 2024

• Fonoster-LFI-PoC

  Public
  Proof-of-concept exploit for Fonoster LFI vulnerability (CVE-2024-43035)

  Python

  •0•0•0•0•Updated Aug 23, 2024Aug 23, 2024