Labs & Practice

vulhub/vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

redcanaryco/atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

qazbnm456/awesome-web-security

🐶 A curated list of Web Security materials and resources.

juice-shop/juice-shop

Intentionally vulnerable web application covering OWASP Top 10 vulnerabilities for security training, CTF competitions, and penetration testing…

screenpipe/screenpipe

YC (S26) | Open Computer History | Record your screen continuously locally and provide context to your agents (Claude, Codex, Openclaw, Hermes,…

digininja/dvwa

Intentionally vulnerable PHP/MariaDB web application for practicing common web security vulnerabilities across multiple difficulty levels in a legal,…

webgoat/webgoat

Deliberately vulnerable web application with interactive lessons and challenges for learning web application security and penetration testing…

sunweb3sec/defihacklabs

Reproduce DeFi hacked incidents using Foundry.

xairy/linux-kernel-exploitation

A collection of links related to Linux kernel security and exploitation

nahamsec/resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

carterperez-dev/cybersecurity-projects

Building 70 Projects ranging from beginner to advanced so anyone can — learn from, build upon, use as a reference, or even copy directly. Gamified…

ctfd/ctfd

CTFs as you need them

shellphish/how2heap

A repository for learning various heap exploitation techniques.

apache/caldera

Automated Adversary Emulation Platform

a-poc/blueteam-tools

Tools and Techniques for Blue Team / Incident Response

mantvydasb/redteaming-tactics-and-techniques

Comprehensive red teaming notes covering offensive security techniques including code injection, defense evasion, lateral movement, and persistence,…