BountySecurity

BountySecurity / BurpBountyVulnApp

Public

Burp Bounty Vuln App provides a safe, local target to validate that your Burp Bounty Pro scanner profiles detect vulnerabilities correctly. It simulates 100+ vulnerability endpoints across multiple categories so you can test your profiles against known-vulnerable patterns.

bountysecurity.ai
10
0
100% credibility
Found Mar 06, 2026 at 10 stars -- GitGems finds repos before they trend. Get early access to the next one.
Sign Up Free
AI Analysis
Python
AI Summary

An intentionally vulnerable local web application designed to help validate and tune security vulnerability detection profiles.

How It Works

1
🕵️‍♂️ Discover the Test Site

You find this free tool online while looking for ways to practice spotting web security issues safely on your own computer.

2
📥 Bring It Home

Download the ready-made package and start the pretend vulnerable website with easy local setup steps.

3
🌐 Browse the Playground

Open your web browser to see a welcoming homepage listing dozens of simulated security flaws grouped by type, ready for testing.

4
🔧 Connect Your Scanner

Point your favorite web security checking tool at the test site to crawl through the pages and hunt for problems.

5
🔍 Watch It Work

As the scanner runs, it flags each intentional weak spot, showing exactly what it detects and why.

✅ Scanner Perfected

You confidently verify your tool catches every issue perfectly, now ready to tackle real websites like a pro.

Sign up to see the full architecture

4 more

Sign Up Free

Star Growth

See how this repo grew from 10 to 10 stars Sign Up Free
Repurpose This Repo

Repurpose is a Pro feature

Generate ready-to-use prompts for X threads, LinkedIn posts, blog posts, YouTube scripts, and more -- with full repo context baked in.

Unlock Repurpose
AI-Generated Review

What is BurpBountyVulnApp?

BurpBountyVulnApp is a Python Flask app, containerized with Docker, that runs a local web server packed with 100+ vulnerability endpoints across categories like XSS, SQLi, RCE, SSRF, path traversal, and CVEs. It gives Burp Bounty Pro users a safe, isolated target to test scanner profiles against known-vulnerable patterns, ensuring detections fire correctly before real scans. Spin it up via docker compose up --build, hit localhost:8088, and the landing page links every endpoint.

Why is it gaining traction?

Unlike generic vuln apps, it's laser-focused on Burp Bounty Pro profiles from burp bounty github, including collaborator triggers for blind issues, passive detections, and 42 CVE paths like Jira or Grafana—stuff burp bounty pro extension users hunt daily. Docker setup takes seconds, no config tweaks, and it validates custom burp bounty profiles against real-world payloads. Low stars haven't stopped burp scanner github fans from forking it for profile tuning.

Who should use this?

Pentesters customizing burp bounty pro download configs for bug bounties, or security engineers validating burp github pro scans on github burp suite community edition setups. Perfect for teams testing burp bounty go integrations or burp suite extensions against GraphQL, WordPress, or header injection endpoints before production hunts.

Verdict

Solid pick for Burp Bounty Pro owners needing a quick local benchmark—despite 10 stars and 1.0% credibility score reflecting early-stage maturity with basic docs and no tests. Docker reliability makes it usable now; contribute profiles if it sticks.

(198 words)

Sign up to read the full AI review Sign Up Free

Similar repos coming soon.