#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
the-art-of-hacking/h4ckerCurated collection of cybersecurity resources, labs, and training materials covering ethical hacking, penetration testing, exploit development,…
trimstray/the-book-of-secret-knowledgeA collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
vulhub/vulhubPre-Built Vulnerable Environments Based on Docker-Compose
redcanaryco/atomic-red-teamSmall and highly portable detection tests based on MITRE's ATT&CK.
qazbnm456/awesome-web-security🐶 A curated list of Web Security materials and resources.
juice-shop/juice-shopIntentionally vulnerable web application covering OWASP Top 10 vulnerabilities for security training, CTF competitions, and penetration testing…
shellphish/how2heapA repository for learning various heap exploitation techniques.
screenpipe/screenpipeYC (S26) | Open Computer History | Continuously record your company computer work, map your workflows, help you find work worth automating, and power…
carterperez-dev/cybersecurity-projectsBuilding 70 Projects ranging from beginner to advanced so anyone can — learn from, build upon, use as a reference, or even copy directly. Owned by my…
kathanp19/howtohuntCollection of methodology and test case for various web vulnerabilities.
digininja/dvwaIntentionally vulnerable PHP/MariaDB web application for practicing common web security vulnerabilities across multiple difficulty levels in a legal,…
webgoat/webgoatDeliberately vulnerable web application with interactive lessons and challenges for learning web application security and penetration testing…
sunweb3sec/defihacklabsReproduce DeFi hacked incidents using Foundry.
xairy/linux-kernel-exploitationA collection of links related to Linux kernel security and exploitation
nahamsec/resources-for-beginner-bug-bounty-huntersA list of resources for those interested in getting started in bug bounties
