Exegol
theporgs/exegolFully featured and community-driven hacking environment
ctfeducationlabs-practice+3
theporgs/exegolFully featured and community-driven hacking environment
madhuakula/kubernetes-goatIntentionally vulnerable Kubernetes cluster environment for hands-on security training. Includes 22+ scenarios covering container escape, RBAC…
clong/detectionlabAutomate the creation of a lab environment complete with security tooling and logging best practices
ignitetechnologies/privilege-escalationThis cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.
owasp/crapiDeliberately vulnerable microservices API designed for hands-on training in the OWASP API Security Top 10 risks, with built-in challenges and a…
mandiant/threatpursuit-vmThreat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and…
ignitetechnologies/mssql-pentest-cheatsheetPractical MSSQL penetration testing cheat sheet covering enumeration, linked-server pivoting, privilege escalation, persistence, and command…
ramadhanamizudin/lazywebLazyWeb is a demonstration web application designed to showcase common server-side application vulnerabilities. Each vulnerability is categorized…
eshard/scaredPython framework for performing side-channel analysis attacks (e.g., CPA) on public datasets, designed for educational use and hands-on practice in…
kali-mx/cve-2023-38408PoC for the recent critical vuln affecting OpenSSH versions < 9.3p2
star-sg/challengesChristmas-themed CTF Advent Calendar with 12 structured challenges across binary exploitation, cryptography, reverse engineering, forensics, OSINT,…
theronielanddaronpodcastshow/svjaThe Super Vulnerable Java Application (SVJA), as demonstrated in the Roniel and DaRon Podcast Show, is an Apache Struts application designed to…
cliffe/breakescapeMountable Rails engine providing 24+ cybersecurity escape room scenarios with randomized passwords, JIT-compiled NPC dialogue, and RESTful API for…
go-lanz/persistnuxBash-based Linux persistence detection tool for DFIR investigations. Scans 15+ persistence mechanisms (systemd, cron, kernel modules, SSH,…
thirukrishnan/cve-2023-50164-apache-struts-rceDockerized vulnerable Apache Struts application for testing CVE-2023-50164 remote code execution, with build and run instructions for security…
kamal-418/vulnerable-lab-nextjs-cve-2025-29927Deliberately vulnerable Next.js application designed for practicing exploitation of CVE-2025-29927, with a tutorial video for guided learning.
limxuan/ehir-vuln-enterprise-loginDeliberately vulnerable web application portal with a containerized backend, designed for practicing exploitation of CVE-2021-44228 and container…
cved-sources/cve-2019-9184Docker container with a pre-configured vulnerable environment for CVE-2019-9184, designed for security testing and educational exploitation practice.