WebExploitBench: 15 Web Applications with 110 Documented Vulnerabilities

15 self-contained web applications with 110 documented vulnerabilities for evaluating real-world web exploitation. The benchmark includes target environments, exploits, reports, and verifiers, covering 0-day, 1-day, and synthetic vulnerabilities. It was created by AgentCyberRange and last updated on 2026-06-16.

Use Cases

• Benchmarking autonomous web exploitation agents based on the 110 documented vulnerabilities.
• Evaluating exploit generation techniques against the provided target environments and verifiers.
• Studying vulnerability patterns across the included 0-day, 1-day, and synthetic flaws.

Strengths

• Contains 110 documented vulnerabilities across 15 distinct web applications.
• Includes target environments, exploits, reports, and verifiers for each application, suggesting a self-contained evaluation setup.

Limitations

• Column-level documentation is absent; field semantics must be inferred after download.
• Row count and file formats are unknown, which may limit suitability assessment.

Provenance

Source

AgentCyberRange

Collection Method

Likely constructed for benchmarking purposes under the AgentCyberRange project.

Freshness

Last updated 2026-06-16 12:12:59; freshness should be verified.