Labs & Practice

maldev-academy/dumpbrowsersecrets

Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from…

cy-clon3/awesome-ios-security

A curated list of awesome iOS application security resources.

electroniccats/catsniffer

CatSniffer is an original multiprotocol and multiband board for sniffing, communicating, and attacking IoT (Internet of Things) devices using the…

owasp/mastg-hacking-playground

Collection of intentionally insecure iOS and Android apps for learning mobile security testing, reverse engineering, and vulnerability analysis,…

rewanthtammana/damn-vulnerable-bank

Intentionally vulnerable Android banking app for practicing mobile security testing, featuring root detection, anti-debugging, SSL pinning, and…

harbor-framework/terminal-bench-2

Benchmark for evaluating AI agents on real-world tasks including vulnerability resolution, code debugging, and protein assembly in containerized…

ebrandi/fdd-book

FreeBSD Device Driver Book

bishopfox/cloudfoxable

Create your own vulnerable by design AWS penetration testing playground

wrongbaud/hackaday-u

Course materials for hackaday.io Ghidra training

christophetd/adaz

:wrench: Deploy customizable Active Directory labs in Azure - automatically.

jailbreakdotparty/dirtyzero

Simple customization toolbox, utilizing CVE-2025-24203. Supports iOS 16.0 - iOS 18.3.2.

stealthsploit/oneruletorulethemstill

A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule

androidmalware/openclaw_termux

How to Install OpenClaw on an Android Phone and Control It via WhatsApp

scoringengine/scoringengine

Scoring Engine for Red/White/Blue Team Competitions

weev3/lkwa

Lesser Known Web Attack Lab

azr43lkn1ght/dfir-labs

Hands-on DFIR challenges covering digital forensics, incident response, malware analysis, and threat hunting with CTF-style flags and real-world…