Dev Tools
secure-code-game
Learn to code securely while having fun through our popular open source in-editor experience, designed for developers, students, and anyone curious about sec…
★ 2.8k starsMIT
View guide →A deliberately vulnerable bank app for practicing web and API security testing.
vuln-bank is an open-source dev tools project by Commando-X (Commando-X/vuln-bank on GitHub). It has 961 GitHub stars and 348 forks, is released under the MIT license, and was last updated on GitHub on 22 September 2026.
Run the vulnerable bank on your own machine.
Choose injection, auth, API, or AI-integration flaws to practice.
Use your testing toolkit against the app freely.
Study how each flaw should have been coded securely.
A full app with the flaws of real-world code.
Classic injection, XSS, and auth bugs to find.
Broken API endpoints for practicing API security.
Modern vulnerabilities in AI-connected features.
Deliberately vulnerable — hack it legally.
Each flaw teaches the correct pattern.
Download the source and move into the project folder.
git clone https://github.com/Commando-X/vuln-bank.git
cd vuln-bankEvery project documents its own setup; start with install requirements.
cat README.md | head -60Follow the project's launch command — Docker, pip, npm, or a binary release.
# see README for the exact launch commandMIT licensed — free for learning and training with attribution.
Yes locally — but never expose it to the public internet.
Basic web knowledge helps; it suits beginners through intermediate testers.
Yes — AI-integrated app vulnerabilities are part of the design.
That is exactly what it is for — run internal security exercises on it.
Learn to code securely while having fun through our popular open source in-editor experience, designed for developers, students, and anyone curious about sec…
ARTEMIS turns natural-language instructions into reliable Android automation. It automates end-to-end workflows, captures logs, and integrates seamlessly wit…
✨ The agentic HTML editor — your local AI agent writes the HTML, you ship it. 🚀 75 Skills × 9 Surfaces (magazine · deck · poster · XHS / tweet · prototype · …
Self-hosted TikTok and Douyin scraper API - no-watermark downloads, MCP and web console
Advanced HTTP API toolkit — no-code ML testing, AI docs and code generation.
Local-first web search, fetch, crawl and research for AI coding agents over MCP — no API keys.
The most-starred other Dev Tools projects in the LibreAI catalogue — the realistic shortlist if vuln-bank is not the right fit.
The open source coding agent
The model-definition framework behind modern AI — thousands of pretrained transformers for text, vision, and audio.
Anthropic's agentic coding tool that lives in your terminal and works across your whole codebase
Cross-platform desktop all-in-one manager for Claude Code, Codex, OpenCode and other coding agents
OpenAI's lightweight coding agent that runs locally in your terminal
Free and open — grab the source, star the repo, and start creating.