1875 matches found
awesome-cyber-skills
🛡️ awesome-cyber-skills A curated list of hacking environments where you can train your cyber skills free, legally and safely. 👋 Welcome Welcome to awesome-cyber-skills — your one-stop library for free, legal, and safe places to train your cybersecurity skills. 📑 Table of Contents 📖 About the List...
LOAD
Intro Based on AWS-Redteam-Lab and OCD GOAD The price for running the lab for 125 hours during one month is approximately 14$. With Free Tier you get 750h of EC2 per month, there is 6 machines so 125h. But you only get 30Gb of storage. So you need storage for the other 5 VMs : 30Gb 5 = 150Gb = 14...
crAPI
crAPI c ompletely r idiculous API crAPI will help you to understand the ten most critical API security risks. crAPI is vulnerable by design, but you'll be able to safely run it to educate/train yourself. crAPI is modern, built on top of a microservices architecture. When time has come to buy your...
h4cker
This repository is a comprehensive collection of cybersecurity references, scripts, tools, code, labs, and training resources. It is carefully curated and maintained by Omar Santos. Overview The repository serves as supplemental material for books, video courses, and live training created by Omar...
PersistBD
PersistBD Code for "Understanding and Enhancing Backdoor Persistency in LLM Agent Post-Training" Findings of EMNLP 2026. 📄 Paper · 🌐 Project page · 📦 Dataset gated A backdoor planted in a model before release is normally worn down by the benign fine-tuning a downstream developer runs. PersistBD...
brawl-public-game-001
BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...
camjacking-templates
CamJacking CamJacking is a security awareness training and simulation framework designed to help organizations educate users about camera permission risks, browser security, and social engineering awareness in controlled, authorized environments. 🎯 What is CamJacking? CamJacking is an...
CyberClass
CyberClass This repository contains educational resources for Class'Code CyberClass. Files tree 📦CyberClass ------------------------------------ Root directory ┣ 📂docs --------------------------------------- Website sources ┃ ┣ 📂assets ----------------------------------- General assets logo,...
pygoat
PyGoat intentionally vuln web Application Security in django. our roadmap build intentionally vuln web Application in django. The Vulnerability can based on OWASP top ten Table of Contents pygoat Installation Docker Compose recommended From Sources Windows Notes Installation Video Uninstallation...
training-security-awareness
Free Security Awareness Training for Employees — Open Source Interactive SCORM Library 130+ free, open-source security awareness training exercises for employees — hands-on, interactive SCORM modules covering phishing awareness training, phishing simulation, GDPR training, EU AI Act compliance, A...
kbd-audio
kbd-audio This is a collection of command-line and GUI tools for capturing and analyzing audio data. Keytap The most interesting tool is called keytap - it can guess pressed keyboard keys only by analyzing the audio captured from the computer's microphone. Check this blog post for more details:...
rep-openai-artifactory
Forensis Lab — Forensic Recreation of the AI Agent Privilege Escalation JFrog Artifactory A safe, isolated, forensic recreation of the "Incidente Cero" OpenAI, May 2026: a sandboxed AI agent discovers the JFrog Artifactory package proxy, extracts credentials from its own configuration, improvises...
mutillidae
OWASP Mutillidae II OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application designed for web-security enthusiasts. It serves as a target for learning and practicing web security skills. Mutillidae can be easily installed on Linux and Windows systems using LAMP, WAMP, a...
pcfg_cracker
PCFG = Probabilistic Context Free Grammar PCFG = Pretty Cool Fuzzy Guesser In short: A collection of tools to perform research into how humans generate passwords. These can be used to crack password hashes, but also create synthetic passwords honeywords, or help develop better password strength...
WebGoat
WebGoat: A deliberately insecure Web Application Introduction WebGoat is a deliberately insecure web application maintained by OWASP designed to teach web application security lessons. This program is a demonstration of common server-side application flaws. The exercises are intended to be used b...
XMGoat
XMGoat Overview XM Goat is composed of XM Cyber terraform templates that help you learn about common Azure security issues. Each template is a vulnerable environment, with some significant misconfigurations. Your job is to attack and compromise the environments. Here’s what to do for each...
awesome-cybersec
awesome-cybersec A collection of awesome platforms, blogs, documents, books, resources and cool stuff about security While this repository is still a work in progress , the goal is to build a categorized community-driven collection of very well-known resources. All the good stuff in one place...
BLEBoy
BLEBoy Goal Create a BLE peripheral that supports all BLE pairing methods that can be used for training and testing, including out-of-band OOB pairing. The perpiheral must be configurable and easy to re-create using consumer parts. About BLEBoy is a BLE peripheral implemented using the Adafruit...
pentest-lab-metasploitable2
Isolated Network Pentest Lab Author: Daniel Stefan de Jesus dos Reis Date: September/2026 Environment: Personal KVM lab on isolated virtual network pentestlab Scope and Authorization Notice This test was conducted exclusively against a self-owned, intentionally vulnerable virtual machine ,...