#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
ine-labs/gcpgoatGCPGoat : A Damn Vulnerable GCP Infrastructure
arosenmund/defcon33_silence_kill_edrHands-on DEFCON workshop materials for killing and silencing EDR agents: lab setup, BYOVD, custom C/C++ evasion tooling, and reverse engineering.
markakd/dirtycredKernel exploitation technique
mhaggis/security-detections-mcpMCP to help Defenders Detection Engineer Harder and Smarter
a2nkf/macos-kernel-exploitmacOS Kernel Exploit for CVE-2019-8781.
hugsy/defcon_27_windbg_workshopDEFCON 27 workshop - Modern Debugging with WinDbg Preview
iknowjason/purplecloudA little tool to play with Azure Identity - Azure and Entra ID lab creation tool. Blog: https://medium.com/@iknowjason/sentinel-for-purple-teaming-1…
sbasu7241/aws-threat-simulation-and-detectionPlaying around with Stratus Red Team (Cloud Attack simulation tool) and SumoLogic
dievus/powershellforpentestersCourse repository for PowerShell for Pentesters Course
nu11secur1ty/kali-linuxKali Linux advanced setup
owasp/igoat-swiftOWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS
anlominus/bug-bountyBug Bounty ~ Awesomes | Books | Cheatsheets | Checklists | Tools | Wordlists | More
doctoreww/evilfonttoolA font-based deception tool for red teaming, security research, and whatever else.
dhmosfunk/cve-2023-25690-pocCVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling…
johackim/docker-hacklabMy personal hacklab, create your own.
maldev-academy/remotetlscallbackinjectionUtilizing TLS callbacks to execute a payload without spawning any threads in a remote process
tothi/ad-honeypot-autodeployDeploy a small, intentionally insecure, vulnerable Windows Domain for RDP Honeypot fully automatically.
