20 platforms · 17 free

Labs & CTFs

Hands-on practice platforms, capture-the-flag events, and intentionally vulnerable environments to sharpen your skills.

Showing 20 of 20 platforms

TryHackMe

TryHackMe

Free

Learn cybersecurity through hands-on exercises and labs. Browser-based machines with guided learning paths.

GeneralBeginner
Hack The Box

Hack The Box

Free

The leading platform for cybersecurity training. Offers machines, challenges, and pro labs for all skill levels.

Penetration TestingIntermediate
PortSwigger Web Security Academy

PortSwigger Web Security Academy

Free

Free online web security training from the creators of Burp Suite. Comprehensive labs covering all web vulnerabilities.

Web SecurityAll Levels
PentesterLab

PentesterLab

Paid

Hands-on web penetration testing exercises. Learn to identify and exploit web vulnerabilities.

Web SecurityIntermediate
VulnHub

VulnHub

Free

Downloadable vulnerable virtual machines for offline practice. Community-created challenges.

Penetration TestingIntermediate
OverTheWire

OverTheWire

Free

War games to learn and practice security concepts. Start with Bandit for Linux basics.

GeneralBeginner
PicoCTF

PicoCTF

Free

Free computer security education program with original CTF challenges. Designed for beginners.

CTFBeginner
CTFtime

CTFtime

Free

Archive and ranking of CTF competitions worldwide. Find upcoming CTF events to participate in.

CTFAll Levels
SANS Cyber Ranges

SANS Cyber Ranges

Paid

Professional-grade cyber ranges for training. Includes holiday hack challenges and NetWars.

GeneralAdvanced
Immersive Labs

Immersive Labs

Paid

Hands-on cybersecurity labs covering offensive and defensive security with real-world scenarios.

GeneralAll Levels
CyberDefenders

CyberDefenders

Free

Blue team training platform. Practice DFIR, threat hunting, and malware analysis with real-world scenarios.

Blue TeamIntermediate
LetsDefend

LetsDefend

Free

SOC analyst training platform. Simulate real security operations center workflows and investigations.

Blue TeamBeginner
Crackmes.one

Crackmes.one

Free

Collection of reverse engineering challenges. Practice cracking and analyzing binaries.

Reverse EngineeringAll Levels
Exploit Education

Exploit Education

Free

Learning resources and VMs for exploit development. Includes Phoenix, Protostar, and Nebula.

Reverse EngineeringIntermediate
DVWA (Damn Vulnerable Web Application)

DVWA (Damn Vulnerable Web Application)

Free

PHP/MySQL web application intentionally vulnerable. Great for practicing web attacks in a safe environment.

Web SecurityBeginner
OWASP WebGoat

OWASP WebGoat

Free

Deliberately insecure application maintained by OWASP for learning web application security.

Web SecurityBeginner
Malware Traffic Analysis

Malware Traffic Analysis

Free

Exercises and quizzes focused on network traffic analysis related to malware infections.

Malware AnalysisIntermediate
CloudGoat

CloudGoat

Free

Rhino Security Labs' "Vulnerable by Design" AWS deployment tool for practicing cloud security.

Cloud SecurityIntermediate
flAWS

flAWS

Free

Challenge series teaching common AWS security mistakes through progressive levels.

Cloud SecurityBeginner
HackTheBox Academy

HackTheBox Academy

Free

Structured cybersecurity education with modules, paths, and hands-on labs from HTB.

GeneralAll Levels