Labs & Practice

madhuakula/kubernetes-goat

Intentionally vulnerable Kubernetes cluster environment for hands-on security training. Includes 22+ scenarios covering container escape, RBAC…

0x4d31/awesome-oscp

A curated list of awesome OSCP resources

botesjuan/burp-suite-certified-practitioner-exam-study

Practical study notes and walkthroughs for PortSwigger Academy labs, covering web vulnerabilities, payloads, enumeration, and BSCP exam strategies.

rosesecurity/red-teaming-ttps

Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!

vaib25vicky/awesome-mobile-security

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners.…

splunk/attack_range

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

renode/renode

Open-source simulation framework for developing, testing, and debugging unmodified software for multi-node embedded and IoT systems, supporting ARM,…

ine-labs/awsgoat

AWSGoat : A Damn Vulnerable AWS Infrastructure

rhinosecuritylabs/cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

owasp/securityshepherd

Web and mobile application security training platform

cyb3rward0g/helk

The Hunting ELK

theporgs/exegol

Fully featured and community-driven hacking environment

joe-shenouda/awesome-cyber-skills

A curated list of hacking environments where you can train your cyber skills legally and safely

safebuffer/vulnerable-ad

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

microsoft/responsible-ai-toolbox

Interactive dashboards and libraries for responsible AI model debugging, covering error analysis, fairness, interpretability, counterfactuals, causal…

dominicbreuker/stego-toolkit

Collection of steganography tools - helps with CTF challenges