Best hands-on lab for learning the fundamentals of cybersecurity and penetration testing workflows also packaged as Docker containers for fast, safe setup.

PowerShell scripts for automating Active Directory lab provisioning — machine setup, DC promotion, and domain join.

Self-hosted AI security lab with fresh LXD workspaces and OpenCode-powered authorized testing

An intentionally vulnerable web application built with Python (Flask) to demonstrate and practice exploiting OWASP Top 10 vulnerabilities.

A collection of hands-on web security labs (OWASP + extra)

Perform active network reconnaissance against an isolated lab environment using industry-standard tools to identify live hosts, enumerate open ports, and fingerprint running services.

Offline Flask web security lab with 10 access control vulnerability challenges. Runs in Termux. Inspired by PortSwigger

KaliArc AI Lab: local-first AI command centre for Kali Linux with Ollama, Open WebUI, MCP agents, scoped Kali tool integrations, start-menu launchers, and optional HexStrike.

Intentionally vulnerable GCP infrastructure for security training — Terraform deployment of DVWA, Cloud Function (SSRF/RCE), public storage bucket, overprivileged SA, and more.

CLI tool to spin up isolated KVM/QEMU penetration testing labs.

Gateway User Enviroment Service Template

Kali Rolling lapidado para performance nativa no Apple Silicon (M1/M2/M3) via OrbStack. Esqueça containers voláteis; aqui os dados sobrevivem ao 'down' graças a volumes persistentes, e o toolkit essencial (Nmap, MSF) é automatizado via Shell Script. Pronto para plugar em redes complexas e túneis cifrados.

Set up an isolated penetration testing home lab using Kali Linux and intentionally vulnerable machines to practice offensive security techniques in a safe, controlled environment.

The goal of this lab was to collect open source intelligence on a practice target using only publicly available sources, without ever touching the target's systems directly.

OverstepLab 是一个以越权漏洞为核心的安全测试靶场，通过模拟一个多用户 VPS 云管理平台（CloudNest），内置多种典型越权漏洞场景，供安全从业者进行漏洞挖掘练习与安全开发学习。