Tools

abdullahmaqbool22/explosive-as-hell-mcs-qualifer-web-500

[First-Blood-XO] React Server Component endpoint vulnerable to CVE-2025-55182 (RCE) → enumerated SUID binaries → /usr/bin/perl had SUID set → used…

r3fr4kt/shocker-tjnull-oscp-

Structured HTB walkthrough demonstrating Shellshock (CVE-2014-6271) exploitation via CGI directory fuzzing and privilege escalation through…

vulnmachines/vulnmachines

Platform

apache/caldera

Automated Adversary Emulation Platform

owasp/securityshepherd

Web and mobile application security training platform

malrev/abd

Course materials for Advanced Binary Deobfuscation by NTT Secure Platform Laboratories

owasp/securecodingdojo

The Secure Coding Dojo is a platform for delivering secure coding knowledge.

prateek147/dvia-v2

Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security…

aau-network-security/haaukins

A Highly Accessible and Automated Virtualization Platform for Security Education

owasp/pwnzzai

Hands-on AI security learning platform with intentionally vulnerable LLM applications. Explore OWASP Top 10 for LLMs through interactive pizza shop…

mubix/ai-ctf

Local AI Capture-the-Flag platform with guided lessons on prompt injection, tool-call abuse, and OSINT against six simulated chatbot personas.

j4fsec/haccthehub

Open source self-hosted cyber security learning platform

sonuoffsec/dvap

An OWASP-aligned intentionally vulnerable platform for learning and testing AI, LLM, RAG, MCP, and Agentic AI security.

owasp/ai-vulnerabilities-playground

Hands-on AI security lab platform with 50+ scenarios across prompt injection, agentic system exploitation, model manipulation, and MCP trust boundary…

paill/silicon2022-capturetheflag

Collection of 41 capture-the-flag challenges deployed via Docker and Azure Kubernetes using the RootTheBox platform. Includes terminal-based puzzles…

jgalego/hiddensteps

HiddenSteps — a local-first personal workflow intelligence platform

syn-4ck/wvctf

WVCTF or WebVulnCTF is a gamified web platform which promotes training in pentesting and web application development security in an entertaining way.…

the-cyber-ledger/tcl-xss-labs

An interactive, self-hosted XSS training platform with 33 progressively harder challenges