Learn to code securely while having fun through our popular open source in-editor experience, designed for developers, students, and anyone curious about security. Get started for free in under 2 minutes, playing right from your browser.
Cybersecurity awareness project for educating users on online threats, safe practices, and security fundamentals.
Intentionally vulnerable web application for security training. Modular design with SQLi, XSS, auth bypass, and file upload vulnerabilities. Docker containerized for safe, isolated learning environments. FOR EDUCATIONAL USE ONLY.
The tests demonstrate all 9 common CORS misconfigurations actively: Wildcard origins Origin reflection with credentials Null origin trust Regex bypasses (prefix/suffix) Subdomain trust pivots Preflight caching issues Unsafe methods exposure Private Network Access misconfigs
SENTINEL SOC is a professional-grade Security Operations Center (SOC) dashboard that simulates real-world threat detection, investigation, and response workflows. Built with React and Recharts, it features live alert monitoring, interactive investigation playbooks with terminal-style execution, global attack maps, real-time CVE intelligence🔒.
Learn to spot security misconfigurations in service mesh (Istio, Consul, Linkerd) configs — hunt-then-reveal practice plus NIST 800-53 / vendor-hardening guidance.
Enterprise CRM security training lab — intentionally vulnerable web application for penetration testing and red/blue team exercises.
Interactive tabletop exercise application for testing cybersecurity incident response plans. Based on NCSC NZ Rolls & Responders framework.
Browser-based terminal simulator voor ethisch hacken leren - Veilige omgeving voor Nederlandse beginners
INTENTIONALLY VULNERABLE FHIR-style healthcare app for training on cross-tenant authorization/IDOR flaws — isolated/educational use only
Intentionally insecure demo app for the Bolt IoT Agentic Programming Training course. Students audit and patch five planted client-side vulnerabilities using AI coding agents. Do NOT deploy publicly or use with real data.
A browser-based terminal CTF for DevOps engineers, SREs, and SysAdmins learning defensive cybersecurity — audit what consultants left behind across 7 tracks.
CLI tool that scrapes Secure Code Warrior challenges into prompt-friendly output for AI workflows
An intentionally vulnerable, enterprise-grade microservices CTF lab mapped to the OWASP Top 10. Features a hybrid-flag validation model for local red-team training and API security audits.
Laboratorio gamificado para aprender investigación digital, análisis forense y ciberseguridad resolviendo casos interactivos.
Deliberately vulnerable, domain-pluggable lab for training Broken Access Control & IDOR (OWASP A01). Localhost only.
Intentionally vulnerable Node.js/Express/PostgreSQL app covering OWASP Top 10, chained into malware analysis and C2 traffic capture.
Sistema de notas propositalmente vulnerável para educação em segurança cibernética e testes de penetração - contém 12+ vulnerabilidades web intencionais (SQL Injection, XSS, Path Traversal, Command Injection, etc.)
🔐 Quiz interactif de sensibilisation à la cybersécurité (style certification TOSA) — thèmes, modes de difficulté, synthèses de cours et ressources OSINT, 100 % local sans compte.
Add a description, image, and links to the security-training topic page so that developers can more easily learn about it.
To associate your repository with the security-training topic, visit your repo's landing page and select "manage topics."