I am looking for sample test cases for all 10 vulnerabilities to exploit those scenarios. I would highly appreciate if any one share or share the link for test cases for a web application with all 10 vulnerabilities or any OWASP vulnerability?
locked by schroeder♦ Aug 10 '18 at 12:17
This question exists because it has historical significance, but it is not considered a good, on-topic question for this site, so please do not use it as evidence that you can ask similar questions here. This question and its answers are frozen and cannot be changed. More info: help center.
Read more about locked posts here.
There are loads. Mutillidae, Damn Vulnerable Web App, WebGoat, BWaPP etc. Also, check out vulnhub, hack.me and others like them.
We have an OWASP project which tracks vulnerable web apps: https://www.owasp.org/index.php/OWASP_Vulnerable_Web_Applications_Directory_Project
The OWASP Top 10 is actually all about risks rather than vulnerabilities. So its not really possible to have simple examples for all of them. For example, how many ways are there to 'misconfigure security' (A5)? As many ways as there are different web apps I'd guess ;)
You can take a look at the Software Assurance Reference Dataset http://samate.nist.gov/SARD/index.php - These are effectively vulnerable code snippets for multiple programming languages and include the OWASP top 10 vulnerabilities.
However, if you want to try live examples you can try a number of opensource or commercial wargame apps: