Training & Labs
Hands-on platforms for learning security skills: guided learning paths, lab environments and capture-the-flag challenges. A resource belongs here when its main purpose is learning, even if it teaches offensive techniques.
Parrot OS
Debian-based open-source security OS from Parrot Security CIC, with Security, Home, HTB and related editions for authorized testing and privacy work.
Kali Linux
Open-source Debian-based penetration testing distribution from OffSec for authorized assessments, research, forensics and reverse engineering.
Immersive
Immersive, formerly Immersive Labs, runs Immersive One, a cyber readiness platform with hands-on labs, cyber ranges, crisis simulations and AI security labs.
Training & LabsPaid
GOAD (Game of Active Directory)
GOAD is a free Orange Cyberdefense lab that builds a deliberately vulnerable Active Directory network so pentesters can practice common attack techniques.
Training & LabsFreeOpen source
pwntools
pwntools is a free open-source Python framework used to build and test exploits for binary CTF challenges and lab targets for CTF players and researchers.
DVWA (Damn Vulnerable Web Application)
DVWA is a free open-source intentionally vulnerable PHP web app used to practice common web attacks at set difficulty levels for students and new testers.
Training & LabsFreeOpen source
OWASP Juice Shop
OWASP Juice Shop is a free open-source deliberately insecure web app used to practice finding and exploiting web flaws for students and security trainers.
Training & LabsFreeOpen source
Web Security Academy
Web Security Academy is a free online training site used to practice legal web application security labs, built by the makers of Burp Suite.
Training & LabsFree
OffSec
Commercial cybersecurity training and certification platform with hands-on labs, learning paths and industry-recognized exams such as OSCP.
Training & LabsPaid
TryHackMe
Commercial browser-based cybersecurity training platform with guided rooms and paths, from beginner fundamentals to offensive and defensive roles.
Training & LabsFreemium
Hack The Box
Commercial hands-on cybersecurity training platform with labs, HTB Academy courses and capture-the-flag events for individuals and teams.
Training & LabsFreemium
Wireshark
Open-source network protocol analyser for capturing and inspecting traffic live or from saved files, with deep dissection and display filters.