An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about DevSecOps in Cybersecurity.

Compromise a web application and delve deeper into the network to access hosts that you cannot directly reach from your attack host using different approaches.

Deploy GOAD labs to ESXi

Code from exercises and labs on TryHackMe. TryHackMe is a free online platform for learning cyber security, using hands-on exercises and labs on the browser!

Professional Hardware Security Lab Setup | PCB analysis, firmware extraction, and embedded systems testing environment

This project turns a Raspberry Pi 4 into a DShield honeypot to capture and study network probes and brute-force attempts in a safe lab

CVE-2016-15042 lab: Dockerized WordPress PoC for unauthenticated file upload in Frontend File Manager <4.0 and N‑Media Post Front‑end Form <1.1

Educational pentesting lab – Red Team exercises with Kali Linux, Metasploitable2, Nessus, Burp Suit, Wireshark, tcpdump, Nmap, Metasploit Framework, SET, Hydra, sqlmap, aircrack-ng and vulnerable apps. Step-by-step reports, commands, and captures.

Reproducible lab for CVE-2020-0610 (BlueGate) - Windows RD Gateway UDP/DTLS remote code execution vulnerability. Includes PowerShell scripts, setup guide, and nuclei template validation examples.

SEED Labs by Kevin Du

Collection of practical codes for Savitribai Phule Pune University's Information Security Laboratory (310258) .

Hands‑on VM lab: Nessus scans & manual patching

Damn Vulnerable Web Application (DVWA) on a local Kubernetes cluster using Minikube and then simulate common web application attacks.

Educational Blue Team lab – Defensive Security exercises with Kali Linux, Splunk, Nessus, tcpdump, Wireshark, iptables, auditd, sysmon and memory forensics. Step-by-step reports, commands, and captures.

🛠️ Validate and demonstrate CVE-2016-15042 with a Dockerized lab for unauthenticated file uploads in WordPress file managers.

Security Laboratory Academic Learning.

🐍 Capture and analyze network probes and brute-force attacks by transforming a Raspberry Pi into a DShield honeypot for safe cybersecurity research.