yeswehack/vulnerable-code-snippets resource

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1176 stars · 221 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A collection of intentionally vulnerable code snippets (mostly PHP) published weekly by YesWeHack for practicing secure code analysis. Each snippet ships with a Docker setup so it can be run safely in an isolated environment.

Use cases

• practice finding vulnerabilities in source code
• learn code auditing for bug bounty
• train static analysis skills on real vulnerable examples
• study common web vulnerabilities like XSS, SQLi, and SSRF
• set up safe dockerized vulnerable apps for security training
• prepare for code review challenges in bug bounty programs

When to choose

• you want small, focused exercises for learning vulnerability code analysis
• you need a safe, dockerized environment to study insecure code
• you're preparing for bug bounty or secure code review work
• you want weekly-updated examples across many vulnerability classes

When to avoid

• you need production-ready secure code or reference implementations
• you want full applications rather than small snippets
• you need a vulnerability scanner or automated security tool
• you require a maintained license or formal support

Facets

learning-resource · maturity active

security penetration-testing vulnerability-scanning developer-tools security penetration-testing education web-development tutorials cross-platform cli bug-bounty code-audit sast-practice vulnerable-code owasp xss sqli ssrf dockerized-labs security-training docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="yeswehack/vulnerable-code-snippets")