kaiiyer / awesome-vulnerable Goto Github PK

https://blog.it-securityguard.com/
https://blog.innerht.ml/
http://brutelogic.com.br/blog/
https://klikki.fi/
http://philippeharewood.com/
https://seanmelia.wordpress.com/
https://respectxss.blogspot.com/
https://www.gracefulsecurity.com/
https://whitton.io/
https://tisiphone.net/
http://archive.nahamsec.com/
http://danlec.com/blog
https://wehackpeople.tumblr.com/
https://bitquark.co.uk/blog/
https://www.arneswinnen.net/
http://bugbountypoc.com/
https://medium.com/@arbazhussain/
https://shahmeeramir.com/
http://www.shawarkhan.com/
https://blog.detectify.com/
http://www.rafayhackingarticles.net/…
https://forum.bugcrowd.com/
https://securitywall.co/
https://www.hackerone.com/blog
http://www.securitytube.net/
https://hackasia.org/
http://www.gangte.net/
https://mukarramkhalid.com/
https://securitytraning.com/
https://jubaeralnaziwhitehat.wordpress.com/…
http://hackaday.com/
http://www.securityfocus.com/
https://packetstormsecurity.com/
http://www.blackhat.com/
https://www.metasploit.com/
http://sectools.org/
https://labs.detectify.com/
https://blog.rubidus.com/
http://www.securityidiots.com/
https://hackernoon.com/
https://sqli-basic.blogspot.com/
https://bugbaba.blogspot.in/
https://vulnerability-lab.com/

If it is poosible,could you please add new vulnerable soap service?
https://github.com/anil-yelken/Vulnerable-Soap-Service

Link to virtual hacking lab isnt working.

Any useful resource with respect to pentesting and vulnerable machines/environment

EnigmaGroup
http://www.enigmagroup.org/

Exploit Exercises
http://exploit-exercises.com/

Google Gruyere
http://google-gruyere.appspot.com/

Gh0st Lab
http://www.gh0st.net/

Hack This Site
http://www.hackthissite.org/

HackThis
http://www.hackthis.co.uk/

HackQuest
http://www.hackquest.com/

Hack.me
https://hack.me

Hacking-Lab
https://www.hacking-lab.com

Hacker Challenge
http://www.dareyourmind.net/

Hacker Test
http://www.hackertest.net/

hACME Game
http://www.hacmegame.org/

Hax.Tor
http://hax.tor.hu/

OverTheWire
http://www.overthewire.org/wargames/

pwn0
https://pwn0.com/home.php

RootContest
http://rootcontest.com/

Root Me
http://www.root-me.org/?lang=en

Security Treasure Hunt
http://www.securitytreasurehunt.com/

Smash The Stack
http://www.smashthestack.org/

TheBlackSheep and Erik
http://www.bright-shadows.net/

ThisIsLegal
http://thisislegal.com/

Try2Hack
http://www.try2hack.nl/

WabLab
http://www.wablab.com/hackme

XSS: Can You XSS This?
http://canyouxssthis.com/HTMLSanitizer/

XSS: ProgPHP
http://xss.progphp.com/

DigitalCorpora
http://digitalcorpora.org/

Digital Forensics Tool Testing Images
http://dftt.sourceforge.net/

DFRWS 2014 Forensics Rodeo
http://www.cs.uno.edu/~golden/dfrws-2014-rodeo.html

Linux LEO Supplemental Files
http://linuxleo.com/

volatility memory samples
https://code.google.com/p/volatility/wiki/FAQ

ISFCE Sample Practical Exercise
http://www.isfce.com/sample-pe.htm

ForGe Forensic test image generator
https://github.com/hannuvisti/forge

Network Forensics
Wireshark Sample Captures

http://wiki.wireshark.org/SampleCaptures
Wireshark Network Analysis Book Supplements

http://www.wiresharkbook.com/studyguide.html
pcapr

http://www.pcapr.net
PacketLife Capture Collection

http://packetlife.net/captures/
DigitalCorpora Packet Dumps

http://digitalcorpora.org/corpora/packet-dumps
Evil Fingers PCAP Challenges

https://www.evilfingers.com/repository/pcaps_challenge.php
PCAPS Repository

https://github.com/markofu/pcaps
Chris Sanders Packet Captures

http://chrissanders.org/packet-captures/
Tcpreplay Sample Captures

http://tcpreplay.appneta.com/wiki/captures.html
Enron Email Dataset

http://www.cs.cmu.edu/~enron/
MAWI Working Group Traffic Archive

http://mawi.wide.ad.jp/mawi/
LBNL-FTP-PKT

http://ee.lbl.gov/anonymized-traces.html/
Malware Analysis

Open Malware / Offensive Computing
http://openmalware.org/

Contagio
http://contagiodump.blogspot.com/

VX Heaven
http://vxheaven.org/

VXVault
http://vxvault.siri-urz.net

MalShare
http://malshare.com/

Virusign
http://www.virusign.com/

theZoo / Malware DB
http://ytisf.github.io/theZoo/

malc0de
http://malc0de.com/database/

FakeAVs blog
http://www.fakeavs.com/

malware_traffic
http://malware-traffic-analysis.net/

Georgia Tech malrec page
http://panda.gtisc.gatech.edu/malrec/

Kernelmode Forum
http://www.kernelmode.info

Malware Hub Forum
http://malwaretips.com/categories/malware-hub.103/

MalwareBlacklist.com
http://www.malwareblacklist.com

Joxean Koret’s List
http://malwareurls.joxeankoret.com

Sucuri Research Labs
http://labs.sucuri.net/?malware

CLEAN MX realtime database
http://support.clean-mx.de/clean-mx/viruses.php

Contagio Mobile Malware
http://contagiominidump.blogspot.com/

Android Sandbox
http://androidsandbox.net/samples/

maltrieve
http://maltrieve.org/

HoneyDrive
http://bruteforce.gr/honeydrive

Online and CTFs
Honeynet Challenges

https://www.honeynet.org/challenges
http://old.honeynet.org/scans/index.html

I Smell Packets
http://ismellpackets.com/

Network Forensics Puzzle contest
http://forensicscontest.com/puzzles

DEF CON CTF Archive
https://www.defcon.org/html/links/dc-ctf.html

DFRWS
http://www.dfrws.org/2013/challenge/index.shtml
http://www.dfrws.org/2010/challenge/
http://www.dfrws.org/2011/challenge/index.shtml
http://www.dfrws.org/2007/challenge/index.shtml
http://www.dfrws.org/2006/challenge/
http://www.dfrws.org/2005/challenge/

ForensicKB Practicals
http://www.forensickb.com/2008/01/forensic-practical.html
http://www.forensickb.com/2008/01/forensic-practical-2.html

http://www.forensickb.com/2010/01/forensic-practical-exer

Dear @kaiiyer ,
Thank you for this awesome list! Sometimes the list refers to a demo site and sometimes to the GitHub code of a project. I have a few projects to add: OWASP webgoat8 an OWASP Wrongsecrets. Would you rather see links to GitHub code or to demo sites?

Add any useful link with respect to pentesting and vulnerable machines.
Read Guidelines before making contribution!