Mind maps / Hacking Practice Lab

Hacking Practice Lab: URL list

The links from the Hacking Practice Lab mind map as a plain list, without the image.

v5.0 · 2019 Jan
PDF·Mind map with links·Image only·All mind maps

Only test systems you own or have written permission to test. Everything listed here was built for practice. This edition (v5.0) dates from January 2019, so some projects have since moved or closed.

Reference

These are the sources and tools referenced in the Hacking Practice Lab mind map. Links marked offline pointed to projects that have since shut down or moved, so they are kept as text only.

Vulnerable Web Applications

BadStorebadstore.net
BodgeIt Storecode.google.com/p/bodgeit
Butterfly Security Projectthebutterflytmp.sourceforge.net
bWAPPmmeit.be/bwapp
sourceforge.net/projects/bwapp/files/bee-box
Commixgithub.com/stasinopoulos/commix-testbed
CryptOMGgithub.com/SpiderLabs/CryptOMG
Damn Vulnerable Node Application (DVNA)github.com/quantumfoam/DVNAoffline
Damn Vulnerable Web App (DVWA)dvwa.co.uk
Damn Vulnerable Web Services (DVWS)dvws.professionallyevil.comoffline
Drunk Admin Web Hacking Challengebechtsoudis.com/work-stuff/challenges/drunk-admin-web-hacking-challengeoffline
Exploit KB Vulnerable Web Appexploit.co.il/projects/vuln-web-app
Foundstone Hackme Bankmcafee.com/us/downloads/free-tools/hacme-bank.aspx
Foundstone Hackme Booksmcafee.com/us/downloads/free-tools/hacmebooks.aspx
Foundstone Hackme Casinomcafee.com/us/downloads/free-tools/hacme-casino.aspx
Foundstone Hackme Shippingmcafee.com/us/downloads/free-tools/hacmeshipping.aspx
Foundstone Hackme Travelmcafee.com/us/downloads/free-tools/hacmetravel.aspx
GameOversourceforge.net/projects/null-gameover
hackxorhackxor.sourceforge.net/cgi-bin/index.pl
Hackazongithub.com/rapid7/hackazon
LAMPSecuritysourceforge.net/projects/lampsecurity
Mothbonsai-sec.com/en/research/moth.php
NOWASP / Mutillidae 2sourceforge.net/projects/mutillidae
OWASP BWAcode.google.com/p/owaspbwa
OWASP Hackademichackademic1.teilar.groffline
OWASP SiteGeneratorowasp.org/index.php/Owasp_SiteGeneratoroffline
OWASP Brickssourceforge.net/projects/owaspbricks
OWASP Security Shepherdowasp.org/index.php/OWASP_Security_Shepherdoffline
PentesterLabpentesterlab.com
PHDays iBank CTFblog.phdays.com/2012/05/once-again-about-remote-banking.htmloffline
SecuriBenchsuif.stanford.edu/~livshits/securibench
SentinelTestbedgithub.com/dobin/SentinelTestbed
SocketToMedigi.ninja/projects/sockettome.php
sqli-labsgithub.com/Audi-1/sqli-labs
MCIR (Magical Code Injection Rainbow)github.com/SpiderLabs/MCIR
sqlilabsgithub.com/himadriganguly/sqlilabs
VulnAppnth-dimension.org.uk/blog.php?id=88
PuzzleMallcode.google.com/p/puzzlemall
WackoPickogithub.com/adamdoupe/WackoPicko
WAEDwaed.infooffline
WebGoat.NETgithub.com/jerryhoff/WebGoat.NET
WebSecurity Dojomavensecurity.com/web_security_dojo
XVWAgithub.com/s4n7h0/xvwa
Zap WAVEcode.google.com/p/zaproxy/downloads/detail?name=zap-wave-0.1.zip

Vulnerable Operating System Installations

21LTR21ltr.com/scenesoffline
Damn Vulnerable Linuxsourceforge.net/projects/virtualhacking/files/os/dvl
exploit-exercises - nebula, protostar, fusionexploit-exercises.com/downloadoffline
heorot: DE-ICE, hackerdemiahackingdojo.com/downloads/iso/De-ICE_S1.100.isooffline
hackingdojo.com/downloads/iso/De-ICE_S1.110.isooffline
hackingdojo.com/downloads/iso/De-ICE_S1.120.isooffline
hackingdojo.com/downloads/iso/De-ICE_S2.100.isooffline
hackingdojo.com/downloads/iso/De-ICE_S1.123.isooffline
Holynixsourceforge.net/projects/holynix/files
Kioptrixkioptrix.com/blog
LAMPSecuritysourceforge.net/projects/lampsecurity
Metasploitablesourceforge.net/projects/virtualhacking/files/os/metasploitable
neutronstarneutronstar.org/goatselinux.html
PenTest Laboratorypentestlab.org/lab-in-a-boxoffline
Pentester Labpentesterlab.com/exercises
pWnOSpwnos.com
RebootUser Vulnixrebootuser.com/?page_id=1041
SecGame # 1: Sauronsg6-labs.blogspot.com/2007/12/secgame-1-sauron.html
scriptjunkie.usscriptjunkie.us/2012/04/the-hacker-games
UltimateLAMPamanhardikar.com/mindmaps/practice-links.html
TurnKey Linuxturnkeylinux.org
Bitnamibitnami.com/stacks
Elastic Serverelasticserver.comoffline
OS Boxesosboxes.org
VirtualBoxesvirtualboxes.org/images
VirtualBox Virtual Appliancesvirtualboximages.com
CentOScentos.org
Default Windows Clientsmicrosoft.com/en-us/evalcenter/evaluate-windows-10-enterpriseoffline
dev.windows.com/en-us/microsoft-edge/tools/vmsoffline
Default Windows Servermicrosoft.com/en-us/evalcenter/evaluate-windows-server-technical-previewoffline
Default VMWare vSpherevmware.com/products/vsphereoffline

Sites for Downloading Older Versions of Various Software

Exploit-DBexploit-db.com
Old Appsoldapps.com
Old Versionoldversion.com
VirtualHacking Reposourceforge.net/projects/virtualhacking/files/apps%40realworld

Sites by Vendors of Security Testing Software

Acunetix acuforumtestasp.vulnweb.com
Acunetix acublogtestaspnet.vulnweb.com
Acunetix acuarttestphp.vulnweb.com
Cenzic crackmebankcrackme.cenzic.com
HP freebankzero.webappsecurity.com
IBM altoromutualdemo.testfire.net
Mavituna testsparkeraspnet.testsparker.com
Mavituna testsparkerphp.testsparker.com
NTOSpider Test Sitewebscantest.com
Embedded Security CTFmicrocorruption.com
EnigmaGroupenigmagroup.org
Escapealf.nu/alert1
Google Gruyeregoogle-gruyere.appspot.com
Gh0st Labgh0st.net
Hack This Sitehackthissite.org
HackThisdefendtheweb.net
HackQuesthackquest.com
Hack.mehack.me
Hacking-Labhacking-lab.com
Hacker Challengedareyourmind.net
Hacker Testhackertest.net
hACME Gamehacmegame.orgoffline
Halls Of Valhallahalls-of-valhalla.org/beta/challengesoffline
Hax.Torhax.tor.hu
OverTheWireoverthewire.org/wargames
PentestITpentestit.ru/enoffline
CSC Play on Demandpod.cybersecuritychallenge.org.ukoffline
pwn0pwn0.com/home.phpoffline
RootContestrootcontest.comoffline
Root Meroot-me.org/?lang=en
Security Treasure Huntsecuritytreasurehunt.com
Smash The Stacksmashthestack.org
SQLZoosqlzoo.net/hackoffline
TheBlackSheep and Erikbright-shadows.net
ThisIsLegalthisislegal.com
Try2Hacktry2hack.nl
WabLabwablab.com/hackme
XSS: Can You XSS This?canyouxssthis.com/HTMLSanitizeroffline
XSS Gamexss-game.appspot.com
XSS: ProgPHPxss.progphp.comoffline

CTF Sites / Archives

CAPTF Repocaptf.comoffline
CTFtime (Details of CTF Challenges)ctftime.org/ctfs
CTF write-ups repositorygithub.com/ctfs
Reddit CTF Announcementsreddit.com/r/securityctf
shell-storm Reposhell-storm.org/repo/CTFoffline
VulnHubvulnhub.com

Mobile Apps

Damn Vulnerable Android App (DVAA)code.google.com/p/dvaa
Damn Vulnerable FirefoxOS Application (DVFA)github.com/pwnetrationguru/dvfaoffline
Damn Vulnerable iOS App (DVIA)github.com/prateek147/DVIA-v2
ExploitMe Mobile Android Labssecuritycompass.github.io/AndroidLabs
ExploitMe Mobile iPhone Labssecuritycompass.github.io/iPhoneLabs
Hacme Bank Androidmcafee.com/us/downloads/free-tools/hacme-bank-android.aspx
InsecureBankpaladion.net/downloadapp.htmloffline
NcN Wargamenoconname.org/evento/wargameoffline
OWASP iGoatcode.google.com/p/owasp-igoat
OWASP Goatdroidgithub.com/jackMannino/OWASP-GoatDroid-Project

Lab

binjitsugithub.com/binjitsu/binjitsuoffline
CTFdgithub.com/isislab/CTFd
Mellivoragithub.com/Nakiami/mellivora
NightShadegithub.com/UnrealAkama/NightShade
MCIRgithub.com/SpiderLabs/MCIR
Dockerdocker.com
Vagrantdeveloper.hashicorp.com/vagrant
NETinVMinformatica.uv.es/~carlos/docencia/netinvm
SmartOStritoncloud.io/smartos
SmartDataCentergithub.com/joyent/sdc
vSphere Hypervisorvmware.com/products/vsphere-hypervisoroffline
GNS3sourceforge.net/projects/gns-3
OCCPopencyberchallenge.netoffline
XAMPPapachefriends.org/index.html

Miscellaneous

VulnVPNrebootuser.com/?page_id=1041
VulnVoIPrebootuser.com/?page_id=1041
Vulnserverthegreycorner.com/2010/12/introducing-vulnserver.html
NETinVMinformatica.uv.es/~carlos/docencia/netinvm
DVRFgithub.com/praetorian-inc/DVRF
HackSys Extreme Vulnerable Driverpayatu.com/hacksys-extreme-vulnerable-driveroffline
VirtuaPlantgithub.com/jseidl/virtuaplant
Fosscommgithub.com/nikosdano/fosscomm
Morning Catchblog.cobaltstrike.com/2014/08/06/introducing-morning-catch-a-phishing-paradiseoffline
AWBOlabs.snort.org/awbo/awbo.htmloffline
Related

More mind maps

All security mind maps →
v1.4 · 2016 FebForensics Practice Lab mind map
Forensics Practice Lab
Challenges, CTFs & sample evidence
v2.0 · 2015 MayVMs & LiveCDs mind map
VMs & LiveCDs
Practice environments & sources
v1.6 · 2013 JulUseful Browser Plugins mind map
Useful Browser Plugins
For testers & researchers