VAPI

Summary from the TLDR InfoSec newsletter

vAPI is a Vulnerable Adversely Programmed Interface, a Self-Hostable API that mimics the OWASP API's Top 10 scenarios through exercises.