#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
endgameinc/rtaScripted framework for simulating over 50 MITRE ATT&CK techniques to test blue team detection capabilities. Includes Python scripts and a compiled…
cider-security-research/cicd-goatA deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
xacone/bestedrofthemarketOpen-source Windows kernel-level EDR lab for understanding and testing detection methods against process injection, credential dumping, and other…
nicholasaleks/damn-vulnerable-droneDamn Vulnerable Drone is an intentionally vulnerable drone hacking simulator based on the popular ArduPilot/MAVLink architecture, providing a…
uber-common/mettaAn information security preparedness tool to do adversarial simulation.
yeswehack/vulnerable-code-snippetsTwitter vulnerable snippets
dere-ad2001/frida-labsThe repo contains a series of challenges for learning Frida for Android Exploitation.
ahegazy0/linux-basics-for-hackers-notesA structured course built from personal study notes of the book Linux Basics for Hackers by OccupyTheWeb.
malrev/abdCourse materials for Advanced Binary Deobfuscation by NTT Secure Platform Laboratories
payatu/tiredful-apiAn intentionally designed broken web application based on REST API.
r3dy/capsulecorp-pentestVagrant VirtualBox environment for conducting an internal network penetration test
dolevf/damn-vulnerable-graphql-applicationDamn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL…
blackhillsinfosec/wififorgeAutomated WiFi hacking lab environment using mininet-wifi to simulate wireless attack vectors for pentester training, eliminating hardware overhead.
securityriskadvisors/vectrTrack red and blue team testing activities to measure detection and prevention capabilities across attack scenarios, with campaign management, TTP…
semperis/entragoatA deliberately vulnerable Microsoft Entra ID environment. Learn identity security through hands-on, realistic attack challenges.
ine-labs/azuregoatAzureGoat : A Damn Vulnerable Azure Infrastructure
letsdefend/awesome-soc-analystUseful resources for SOC Analyst and SOC Analyst candidates.
dockersecurityplayground/dspA Microservices-based framework for the study of Network Security and Penetration Test techniques
