#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
trailofbits/not-going-anywhereIntentionally vulnerable Golang programs exposing web, gRPC, and database/sql flaws for security training, vulnerability discovery, and remediation…
prime-radiant-inc/superpowers-evalsBehavioral eval lab (Quorum) for the superpowers project that drives real coding-agent CLIs (Claude, Codex, Gemini, Kimi, and more) through a QA…
tenable/cnappgoatCNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.
sofianehamlaoui/pentest-bookmarkzA collection of useful links for Pentesters
gmh5225/awesome-ai-securityA curated list of AI Security materials and resources for Pentesters, Bug Hunters, and Security Researchers.
rootsecdev/relay_bibleTechnical Reference to multiple relay techniques
liveoverflow/ctf-screenshotterCTF web challenge simulating a real-world screenshotting vulnerability, with Docker setup and video writeup for hands-on security education.
owasp/pwnzzaiHands-on AI security learning platform with intentionally vulnerable LLM applications. Explore OWASP Top 10 for LLMs through interactive pizza shop…
scriptingxss/embedosEmbedOS - Embedded security testing virtual machine
t0kx/exploit-cve-2015-3306ProFTPd 1.3.5 - (mod_copy) Remote Command Execution exploit and vulnerable container
vegabird/xvnaExtreme Vulnerable Node Application
raspberrypi/rp2350_hacking_challengeRaspberry Pi RP2350 hacking challenge: extract a 128-bit OTP secret protected by secure boot and OTP lock, with setup scripts and firmware for Pico 2…
appsecco/dvcsharp-apiDamn Vulnerable C# Application (API)
cybersecsi/dockerized-androidA container-based framework to enable the integration of mobile components in security training platforms
mitre/brawl-public-game-001Data from a BRAWL Automated Adversary Emulation Exercise
shredzwho/ig-detectiveOSINT tool researched and designed to hunt down IG handles
xmcyber/xmgoatTerraform-based Azure security lab with intentionally misconfigured environments for hands-on attack and compromise practice. Includes scenario flows…
bishopfox/json-interop-vuln-labsCompanion labs to "An Exploration of JSON Interoperability Vulnerabilities"
