courses & labs

Spot The Vuln

Regex Tutorial—From Regex 101 to Advanced Regex

VoidStar Security's Embedded Systems Hacking Resources

Learn Claude Code Interactively — by Ahmed Nagdy

How to build a coding agent

Finding security vulnerabilities through fuzzing

Bug Bounty Masterclass | Wiz [app]

GitHub - Orange-Cyberdefense/GOAD: game of active directory

Web Security Academy: Free Online Training from PortSwigger

Free Interactive Secure Development Training

Penetration Testing, Security Code Review and Web App Security Exercises

HackingHub

Introduction | Security Knowledge Framework

hextree.io

MOBISEC

Courses | OpenSecurityTraining2

Where's My Browser? | Authentication Failure

GitHub - appsecco/vulnerable-mcp-servers-lab: A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.

Exploit Education :: Andrew Griffiths' Exploit Education

pwn.college

SmashTheStack Wargaming Network

Reverse Engineering Academy

NetExec-Lab/Barbhack-2025 at main · Pennyw0rth/NetExec-Lab · GitHub

GitHub - LiteshGhute/LLMGoat: LLMGoat: Offensive LLM Security Environment

Offensive Security

Vulnerable By Design ~ VulnHub

HTB Login

irsdl/viewstate-security-workshop: This repository is for the Testing ASP.NET ViewState with YSoNet (YSoSerial.NET) workshop.

DOMLogger++ | GreHack 2024 Workshop

PawelKozy/mcp-breach-to-fix-labs: Hands-on MCP security lab: 10 real incidents reproduced with vulnerable/secure MCP servers, pytest regressions, and Claude/Cursor battle-tested exploit walkthroughs