Lab · platformhosted
VulnHub
Repository of downloadable deliberately vulnerable VM images to practice exploitation in your own lab.
Use responsibly
Test only systems you own or are explicitly authorized to test. Unauthorized testing is illegal.
A shared, hosted instance — for practice only, within the platform's own rules.
Tagsplatform
More labs & practice targets
- HackTheBoxplatformOnline platform of hands-on hacking machines and challenges for skill-building (VM/CTF style).
- TryHackMeplatformGuided online rooms and labs teaching offensive and defensive security through hands-on exercises.
- AI-GoatllmVulnerable-LLM CTF challenges aligned to the OWASP Top 10 for LLM Applications, running a local Vicuna model (no cloud fees).
- Altoro Mutual (AltoroJ)web-appClassic sample banking J2EE web app demonstrating real-world application security issues; also self-hostable.
- AuthLab (digininja)authSelection of authentication and authorization challenges drawn from real-world examples, written in Go.
- BodgeIt Storeweb-appSelf-contained Java/JSP vulnerable app aimed at pentest beginners, covering XSS, SQLi and hidden content.