This repository contains the official source code for vulnerable web applications and target scenarios integrated into the RedPatch interactive application security platform.
Each directory in this repository represents an isolated, vulnerable application module designed to be built into Docker images for hands-on exploitation and defense.
- Target Source Code: Contains vulnerable entry points (
main.py, backend scripts) and configuration manifests (config.json). - Dual-Mode Ready: Built-in challenge logic supporting Coder Mode (source code patching) and Pentester Mode (flag discovery).
- Isolation First: Standardized directory structures designed to be extracted into
/appworkspace containers at runtime.