Exegol
theporgs/exegolFully featured and community-driven hacking environment
ctfeducationlabs-practice+3
theporgs/exegolFully featured and community-driven hacking environment
cliffe/breakescapeMountable Rails engine providing 24+ cybersecurity escape room scenarios with randomized passwords, JIT-compiled NPC dialogue, and RESTful API for…
cosmosyi/autocontrol-arenaAutomated framework for frontier AI safety evaluation that synthesizes executable, pressure-rich test environments to uncover latent risks in…
webgoat/webgoatDeliberately vulnerable web application with interactive lessons and challenges for learning web application security and penetration testing…
webpwnized/mutillidaeOWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an…
ramadhanamizudin/lazywebLazyWeb is a demonstration web application designed to showcase common server-side application vulnerabilities. Each vulnerability is categorized…
brnpl/flutter-reverse-engineering-labsHands-on challenges for learning how to reverse engineer Flutter applications.
owasp/crapiDeliberately vulnerable microservices API designed for hands-on training in the OWASP API Security Top 10 risks, with built-in challenges and a…
makarov05bm/wsgoatThe vulnerable application that will teach you how to hack WebSockets
shredzwho/ig-detectiveOSINT tool researched and designed to hunt down IG handles
karitamw/printnightmare-detection-mitigation-labSanitised Windows security lab demonstrating Active Directory administration, host and network detection, and layered mitigation of CVE-2021-34527.
toxy4ny/artaxerxesAdvanced Multi-Technology Stress Testing Framework Educational Cybersecurity Tool for High-Performance Network Testing
go-lanz/persistnuxBash-based Linux persistence detection tool for DFIR investigations. Scans 15+ persistence mechanisms (systemd, cron, kernel modules, SSH,…
eshard/scaredPython framework for performing side-channel analysis attacks (e.g., CPA) on public datasets, designed for educational use and hands-on practice in…
mythicaltree/cve-2019-2215Proof-of-concept exploit for CVE-2019-2215 (Bad Binder) targeting Android 10 x86_64 emulator. Designed for isolated kernel exploitation research and…
limxuan/ehir-vuln-enterprise-loginDeliberately vulnerable web application portal with a containerized backend, designed for practicing exploitation of CVE-2021-44228 and container…
xacone/bestedrofthemarketOpen-source Windows kernel-level EDR lab for understanding and testing detection methods against process injection, credential dumping, and other…