Топ 12 сайтов, где можно учиться тестировать безопасность веб и api.

Источник: Vitali Brunovski, QA Automation Mentor

▫️LabEx Cybersecurity Labs — https://labex.io/learn/cybersecurity

▫️OWASP Juice Shop — https://owasp.org/www-project-juice-shop/

▫️Gin and Juice Shop — https://ginandjuice.shop/

▫️Gruyere — https://google-gruyere.appspot.com/

▫️bWAPP — http://www.itsecgames.com/

▫️Zero Bank — http://zero.webappsecurity.com/

▫️tryhackme.com — https://tryhackme.com/

▫️Damn Vulnerable GraphQL Application — https://github.com/dolevf/Damn-Vulnerable-GraphQL-Application

▫️VAmPI The Vulnerable API (Based on OpenAPI 3) — https://github.com/erev0s/VAmPI

▫️Firing Range — https://public-firing-range.appspot.com/

▫️OWASP Vulnerable Web Applications Directory — https://owasp.org/www-project-vulnerable-web-applications-directory/

▫️Supercar Showdown — https://hack-yourself-first.com/