Exegol
theporgs/exegolFully featured and community-driven hacking environment
ctfeducationlabs-practice+3
theporgs/exegolFully featured and community-driven hacking environment
shredzwho/ig-detectiveOSINT tool researched and designed to hunt down IG handles
webgoat/webgoatDeliberately vulnerable web application with interactive lessons and challenges for learning web application security and penetration testing…
trimstray/the-book-of-secret-knowledgeA collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
the-art-of-hacking/h4ckerCurated collection of cybersecurity resources, labs, and training materials covering ethical hacking, penetration testing, exploit development,…
metarget/metargetMetarget is a framework providing automatic constructions of vulnerable infrastructures.
cyb3rmik3/prompt-injection-email-samplesOpen .eml test set for evaluating how email security controls and AI mailbox assistants handle indirect prompt injection across disclosure,…
madhuakula/kubernetes-goatIntentionally vulnerable Kubernetes cluster environment for hands-on security training. Includes 22+ scenarios covering container escape, RBAC…
commando-x/vuln-bankIntentionally vulnerable banking platform for practicing web application, API, and AI/LLM security testing, secure code review, and DevSecOps…
tombstoneghost/tiwapDeliberately vulnerable Flask web application with 22 security flaws across 3 difficulty levels for hands-on penetration testing and web security…
broskigx/oihk-pentestingAutonomous multi-agent AI penetration-testing engine: a governed tool sandbox, an immutable evidence-and-validation gate, and a reproducible…
probablysecure/triage-cve-2017-0144Goal is to triage well known attacks and learn how security teams quickly respond.
top-celestial-company-ltd/dros-vep-liteOpen-source, 100% reproducible AI Agent Runtime Security Benchmark & Sandbox Environment (RFC-010 Draft Protocol).
cr0nx/awesome-linux-attack-forensics-purplelabsThis page is a result of the ongoing hands-on research around advanced Linux attacks, detection and forensics techniques and tools.
whgojp/javaseclabComprehensive Java vulnerability lab with vulnerable and fixed code, attack scenarios, source/sink audit notes, and secure coding guidance for…
vighnesh91/severitasAuthorized social-engineering simulation framework with an isolated loopback lab, synthetic audience generation, pre-flight authorization checks, and…
ko0ler/homelabGNS3 home lab documenting a segmented network with Cisco ASAv firewall, L3 core, DMZ, and an Active Directory domain for practicing networking,…
vulhub/vulhubPre-Built Vulnerable Environments Based on Docker-Compose