Learn to code securely while having fun through our popular open source in-editor experience, designed for developers, students, and anyone curious about security. Get started for free in under 2 minutes, playing right from your browser.
Vulnerable Nodejs — a real shop (NodeBazaar) intentionally full of security bugs. 14 labs, OWASP Top 10:2025, SAST benchmark. Node.js port of DVWA.
Cybersecurity awareness project for educating users on online threats, safe practices, and security fundamentals.
A CISO tower-defense game. Build firewall routes, stop malware, survive board meetings. Play in your desktop browser — or bring your own threat data.
Intentionally vulnerable web application for security training. Modular design with SQLi, XSS, auth bypass, and file upload vulnerabilities. Docker containerized for safe, isolated learning environments. FOR EDUCATIONAL USE ONLY.
SENTINEL SOC is a professional-grade Security Operations Center (SOC) dashboard that simulates real-world threat detection, investigation, and response workflows. Built with React and Recharts, it features live alert monitoring, interactive investigation playbooks with terminal-style execution, global attack maps, real-time CVE intelligence🔒.
The tests demonstrate all 9 common CORS misconfigurations actively: Wildcard origins Origin reflection with credentials Null origin trust Regex bypasses (prefix/suffix) Subdomain trust pivots Preflight caching issues Unsafe methods exposure Private Network Access misconfigs
RØOT — offline-first AppSec training with OWASP labs, browser CTFs, remediation guides, security tools, and a reproducible CVE catalog built from public sources.
Learn to spot security misconfigurations in service mesh (Istio, Consul, Linkerd) configs — hunt-then-reveal practice plus NIST 800-53 / vendor-hardening guidance.
Interactive tabletop exercise application for testing cybersecurity incident response plans. Based on NCSC NZ Rolls & Responders framework.
Halt Academy’s Docker-based vulnerable web application lab for practicing OS Command Injection in a controlled environment. Learn vulnerability discovery, payload testing, command execution, impact analysis, and mitigation techniques. Designed for cybersecurity students, penetration testers, bug bounty hunters, and security professionals.
Browser-based terminal simulator voor ethisch hacken leren - Veilige omgeving voor Nederlandse beginners
Intentionally insecure demo app for the Bolt IoT Agentic Programming Training course. Students audit and patch five planted client-side vulnerabilities using AI coding agents. Do NOT deploy publicly or use with real data.
INTENTIONALLY VULNERABLE FHIR-style healthcare app for training on cross-tenant authorization/IDOR flaws — isolated/educational use only
Intentionally vulnerable banking app for teaching OWASP Top 10 web pentesting (training lab — do not deploy)
Pipeline Security 101 — CI/CD guvenligi uygulama lab'i. Icinde bilerek birakilmis 5 guvenlik hatasi var; hepsini duzeltip karneyi 5/5 yapmak gorevin.
CLI tool that scrapes Secure Code Warrior challenges into prompt-friendly output for AI workflows
🔐 Quiz interactif de sensibilisation à la cybersécurité (style certification TOSA) — thèmes, modes de difficulté, synthèses de cours et ressources OSINT, 100 % local sans compte.
Intentionally vulnerable Node.js/Express/PostgreSQL app covering several OWASP Top 10 categories, chained into malware analysis and C2 traffic capture.
To associate your repository with the security-training topic, visit your repo's landing page and select "manage topics."