OWASP / OWASP-VWAD

The OWASP Vulnerable Web Applications Directory project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.
https://owasp.org/www-project-vulnerable-web-applications-directory/
Apache License 2.0
858 stars 219 forks source link

adding YPrey in other programming languages #212

Closed yrprey closed 2 months ago

kingthorin commented 2 months ago

I'm going to look at revising these entries to combine them. Instead of continuing to add 13,000,000 individual yprey entries.

kingthorin commented 2 months ago

I've updated the schema and collection here, and the template on the website to handle them as references on a single entry.

yrprey commented 2 months ago

@kingthorin, good morning.

It doesn't make sense to unify the projects in the Collection. This will make it very confusing to understand the technologies used in each project.

For example, yrpreyBlog does not include NextJs and React technologies as stated in "note(s)." The yrpreyBlog is written only in PHP, MySQL, JavaScript, and Bootstrap.

Imagine a user downloading yrpreyBlog thinking it contains React/NextJs and that the framework has API vulnerabilities; the user will be frustrated and think the framework is bad.

Another example is a user downloading projects written in C and C++ that have no relation to NextJs or PHP from yrpreyBlog. Again, the user will think the project is bad, but this is not true.

Each project has its specific technology and specific notes.

Please keep it as it was.

To contribute and cooperate with security knowledge in the field, we will send 10 more projects that are part of training sessions we have conducted in large companies and now wish to share with OWASP and the necessary public.

We count on your help.