#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
owasp/railsgoatA vulnerable version of Rails that follows the OWASP Top 10
tandasat/hypervisor-101-in-rustThe materials of "Hypervisor 101 in Rust", a one-day long course, to quickly learn hardware-assisted virtualization technology and its application…
francisck/danderspritz_labA fully functional DanderSpritz lab in 2 commands
bc-security/beginners-guide-to-obfuscationHands-on red-team obfuscation workshop teaching AMSI bypass, ETW evasion, and payload obfuscation with PowerShell, Visual Basic, and C# to evade…
huskyhacks/pmat-labsLabs for Practical Malware Analysis & Triage
roottusk/vapivAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.
mvelazc0/badzureBadZure automates the deployment of intentionally misconfigured Entra ID tenants and Azure subscriptions, populating them with diverse entities and…
opsxcq/exploit-cve-2016-10033PHPMailer < 5.2.18 Remote Code Execution exploit and vulnerable container
cyb3rmik3/kql-threat-hunting-queriesA repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).
nickvourd/windows-local-privilege-escalation-cookbookWindows Local Privilege Escalation Cookbook
sqlmapproject/testenvA collection of web pages vulnerable to SQL injection flaws
hardik05/damn_vulnerable_c_programAn example C program which contains vulnerable code for common types of vulnerabilities. It can be used to show fuzzing concepts.
owasp/securecodingdojoThe Secure Coding Dojo is a platform for delivering secure coding knowledge.
liveoverflow/pwnadventure3PwnAdventure3 Server
prateek147/dvia-v2Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security…
nccgroup/sadcloudA tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
securityjoes/masterparserMasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs
adeyosemanputra/pygoatintentionally vuln web Application Security in django
