Origin Server

Vulnerable web application origin server for F5 XC demo environments.

• Juice Shop - OWASP Top 10 (XSS, SQLi, CSRF)
• DVWA - WAF testing (adjustable difficulty)
• VAmPI - REST API security (OWASP API Top 10)
• httpbin - HTTP request/response testing
• whoami - Request diagnostics (headers, IP, hostname)
• CSD Demo - Client-Side Defense testing (skimming, formjacking)
• DVGA - GraphQL security (introspection, batching, injection)
• RESTaurant - REST API security (OWASP API Top 10 2023)
• crAPI - Microservices API security (BOLA, BFLA, SSRF)

Health Check