mutillidae

OWASP Mutillidae II OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application designed for web-security enthusiasts. It serves as a target for learning and practicing web security skills. Mutillidae can be easily installed on Linux and Windows systems using LAMP, WAMP, a...

DVWA

DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Application DVWA is a PHP/MariaDB web application that is damn vulnerable. Its main goal is to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of...

kubernetes-goat

Kubernetes Goat ✨ The Kubernetes Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security 🚀 🙌 Refer to https://madhuakula.com/kubernetes-goat for the guide 📖 🧰 Setting up Kubernetes Goat Ensure you have admin access to the Kubernetes cluster...

iGoat-Swift

!GSOC...

brawl-public-game-001

BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...

PwnAdventure3

PwnAdventure3 Welcome to Pwnie Island! Pwn Adventure 3: Pwnie Island is a limited-release, first-person, true open-world MMORPG set on a beautiful island where anything could happen. That's because this game is intentionally vulnerable to all kinds of silly hacks! Flying, endless cash, and more a...

awesome-cybersec

awesome-cybersec A collection of awesome platforms, blogs, documents, books, resources and cool stuff about security While this repository is still a work in progress , the goal is to build a categorized community-driven collection of very well-known resources. All the good stuff in one place...

pcfg_cracker

PCFG = Probabilistic Context Free Grammar PCFG = Pretty Cool Fuzzy Guesser In short: A collection of tools to perform research into how humans generate passwords. These can be used to crack password hashes, but also create synthetic passwords honeywords, or help develop better password strength...

MASTG-Hacking-Playground

MASTG Hacking Playground Welcome to the MASTG Hacking Playground which is part of the OWASP Mobile Application Security MAS project. The MASTG Hacking Playground is a collection of educational iOS and Android mobile apps, that are intentionally build insecure in order to give practical guidance t...

SecurityShepherd

OWASP Security Shepherd The OWASP Security Shepherd Project is a web and mobile application security training platform. Security Shepherd has been designed to foster and improve security awareness among a varied skill-set demographic. The aim of this project is to take AppSec novices or experienc...

h4cker

This repository is a comprehensive collection of cybersecurity references, scripts, tools, code, labs, and training resources. It is carefully curated and maintained by Omar Santos. Overview The repository serves as supplemental material for books, video courses, and live training created by Omar...

Tiredful-API

What is Tiredful API? Tiredful API is intentionally designed broken app. The aim of this web app is to teach developers, QA or security professionals about flaws present in webservices REST API due to insecure coding practice. Who can use Tiredful API? Web developers Web Pentesters Security...

maldev-for-dummies

초보자를 위한 멀웨어 개발 EDR 시대에, 레드팀 운영자는 더 이상 사전 컴파일된 페이로드를 사용하여 빠져나갈 수 없습니다. 따라서 멀웨어 개발은 모든 운영자에게 필수적인 기술이 되고 있습니다. 멀웨어 개발을 시작하는 것이 어렵게 보일 수 있지만, 실제로는 매우 쉽습니다. 이 워크숍은 시작하는 데 필요한 모든 것을 보여줍니다! 이 저장소에는 Hack in Paris 2022 및 X33fcon 2023에서 진행되었거나 진행될 'MalDev for Dummies' 워크숍의 슬라이드와 함께 제공되는 실습 자료가 포함되어 있습니다...

conti-pentester-guide-leak

conti-pentester-guide-leak This repository was created to archive leaked leaked pentesting materials, which were previously given to Conti ransomware group affilates: obraz Mentioned materials covers topics such us: configure the Rclone software with a MEGA for data exfiltration configure the...

clickfix-simulator-2025

ClickFix 교육 도구 가볍고 자체 호스팅되는 "ClickFix" 유형 사회공학 공격 시뮬레이션 도구. 면책 조항 이 도구는 승인된 보안 인식 교육 전용입니다. 명시적 허가 없이 이 도구를 사용하여 시스템이나 사용자를 대상으로 하는 행위는 불법이며 비윤리적입니다. 저자는 이 소프트웨어의 오용에 대해 책임을 지지 않습니다. 개요 ClickFix"ClearFake" 또는 "Fake Update"라고도 함는 공격자가 사용자를 속여 가짜 오류를 "수정"하기 위해 수동으로 악성 명령주로 Windows 실행 대화 상자 사용을 실행하게...

gophish

Gophish Gophish: 오픈소스 피싱 툴킷 Gophish는 기업과 침투 테스터를 위해 설계된 오픈소스 피싱 툴킷입니다. 신속하고 쉽게 피싱 캠페인과 보안 인식 교육을 설정하고 실행할 수 있는 기능을 제공합니다. 설치 Gophish 설치는 매우 간단합니다. 시스템에 맞는 릴리스가 포함된 zip 파일을 다운로드하여 압축을 풀고 바이너리를 실행하면 됩니다. Gophish는 Windows, Mac, Linux 플랫폼용 바이너리 릴리스를 제공합니다. 소스에서 빌드하기 소스에서 빌드하는 경우 Gophish에는 Go v1.10 이상...

gophish

Gophish Gophish: Open-Source Phishing Toolkit Gophish is an open-source phishing toolkit designed for businesses and penetration testers. It provides the ability to quickly and easily setup and execute phishing engagements and security awareness training. Install Installation of Gophish is...

hacker101

Hacker101 Hacker101 is a free class for web security. Whether you're a programmer with an interest in bug bounties or a seasoned security professional, Hacker101 has something to teach you. Getting Started Prerequisites Ruby Suggestion: use rbenv bundler Run gem install bundler, if needed...

csaf

CSAF사이버 보안 인식 프레임워크, Cyber Security Awareness Framework 는 개인, 조직 및 커뮤니티의 사이버 보안 인식과 이해를 향상시키기 위한 구조화된 접근 방식입니다. 이 프레임워크는 효과적인 사이버 보안 인식 프로그램 개발을 위한 지침을 제공하며, 인식 요구 평가, 교육 자료 제작, 훈련 및 시뮬레이션 수행, 커뮤니케이션 캠페인 구현, 인식 수준 측정 등 주요 영역을 다룹니다. 이 프레임워크를 채택함으로써 조직은 강력한 보안 문화를 조성하고, 사이버 위협을 탐지하고 대응하는 능력을 향상시키며,...

csaf

The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...