#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
owasp/wrongsecretsVulnerable app with examples showing how to not use secrets
microsoft/whatthehackA collection of challenge based hack-a-thons including student guide, coach guide, lecture presentations, sample/instructional code and templates. …
ashemery/exploitation-courseOffensive Software Exploitation Course
owasp/nodegoatThe OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how…
th3xace/sudo_killerA tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific…
bittentech/bug-bounty-beginner-roadmapThis is a resource factory for anyone looking forward to starting bug hunting and would require guidance as a beginner.
fabiobaroni/awesome-exploit-developmentA curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development
microsoft/ai-red-teaming-playground-labsAI Red Teaming playground labs to run AI Red Teaming trainings including infrastructure.
iknowjason/awesome-cloudsec-labsAwesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.
davidprowe/badbloodBadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is…
automatedlab/automatedlabPowerShell-based provisioning framework for deploying complex lab environments on Hyper-V and Azure. Supports Windows, Linux, and products like AD,…
hasherezade/malware_training_vol1Materials for Windows Malware Analysis training (volume 1)
hacksysteam/hacksysextremevulnerabledriverHackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux
erev0s/vampiVulnerable REST API with OWASP top 10 vulnerabilities for security testing
commando-x/vuln-bankIntentionally vulnerable banking platform for practicing web application, API, and AI/LLM security testing, secure code review, and DevSecOps…
nextronsystems/aptsimulatorA toolset to make a system look as if it was the victim of an APT attack
arch3rpro/pentest-windows⚔️Windows11 Penetration Suite Toolkit 🔰 The First Windows Penetration Testing Environment on Mac M Chips
bridgecrewio/terragoatIntentionally vulnerable Terraform infrastructure for learning cloud misconfiguration detection and DevSecOps practices across AWS, Azure, and GCP.
