Docker lab + one-payload exploit + defensive scanner for the fastjson 1.2.66-1.2.83 @jsontype remote-class-load RCE (SSRF->defineClass under Spring Boot LaunchedURLClassLoader; autoType OFF; parseObject binding is not a mitigation)

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about DevSecOps in Cybersecurity.

Web Application Pentesting Lab with over 40 plus vulnerability, which covers all the owasp top 10 issues.

Compromise a web application and delve deeper into the network to access hosts that you cannot directly reach from your attack host using different approaches.

Simulador de Evil Twin com captive portal usando ESP8266 para educação em segurança Wi-Fi e testes controlados.

Deploy GOAD labs to ESXi

This repository is designed for educational purposes, with real code, real labs, and real-world logic — but zero bullshit.

Code from exercises and labs on TryHackMe. TryHackMe is a free online platform for learning cyber security, using hands-on exercises and labs on the browser!

NTCIP 1202 traffic-signal attack lab: emulated controller + SUMO intersection. snmpset commands drive a live SUMO-GUI window.

🍪 Cookie Security Lab - A comprehensive CTF challenge demonstrating 6 cookie vulnerabilities with hands-on exploitation exercises, hashed flags, and secure patterns for learning.

Professional Hardware Security Lab Setup | PCB analysis, firmware extraction, and embedded systems testing environment

Cybersecurity portfolio showcasing hands-on offensive tools — ESP8266, Raspberry Pi Pico W, Python & Kali Linux.

Reproducible Docker lab for CVE-2024-21182 — Oracle WebLogic T3/IIOP OpaqueReference JNDI injection → unauthenticated RCE (CVE-2023-21839 patch-bypass family). One-command validate.sh.

Hands-on lab for demonstrating and reporting OWASP Top 10 for LLM vulnerabilities in AI agents.

Network simulation and security testing platform with 13 supported protocols, red team arsenal, active defense and traffic simulators

A simulated enterprise DFIR lab environment modeling a corporate LAN with Active Directory, pfSense, Velociraptor, and attacker emulation for incident response and threat investigation.

This project turns a Raspberry Pi 4 into a DShield honeypot to capture and study network probes and brute-force attempts in a safe lab

Pentest Lab: Recon (Nmap) + DAST (OWASP ZAP baseline/full) against OWASP Juice Shop with reproducible HTML/TXT/PNG evidence and optional SOC correlation.

A multi-industry vulnerable attack surface with 450+ real API endpoints and 12 web apps

Simulador educacional em Batch para demonstrar testes de senha baseados em wordlists e conceitos de segurança da informação.