
awesome-cyber-skills
A curated list of hacking environments where you can train your cyber skills legally and safely

A curated list of hacking environments where you can train your cyber skills legally and safely

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

Collection of steganography tools - helps with CTF challenges

A collection of challenge based hack-a-thons including student guide, coach guide, lecture presentations, sample/instructional code and templates. …

A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific…

A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is…

A toolset to make a system look as if it was the victim of an APT attack

Awesome list of step by step techniques to achieve Remote Code Execution on various apps!

AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK…

The repo contains a series of challenges for learning Frida for Android Exploitation.

A structured course built from personal study notes of the book Linux Basics for Hackers by OccupyTheWeb.

A Microservices-based framework for the study of Network Security and Penetration Test techniques

A vulnerable version of Rails that follows the OWASP Top 10

The materials of "Hypervisor 101 in Rust", a one-day long course, to quickly learn hardware-assisted virtualization technology and its application…

BadZure automates the deployment of intentionally misconfigured Entra ID tenants and Azure subscriptions, populating them with diverse entities and…

A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).

A collection of web pages vulnerable to SQL injection flaws