Buffer Overflow Lab — Stack Smashing 101
Buffer overflow lab with 7 vulnerable C programs: ret2win (verified exploit → flag), ret2libc, off-by-one, ROP practice, format string read/write and more, each
Arsenal
Professional offensive security tools & exploit frameworks
98
Tools
12
Categories
Active Directory Attack Path Lab
Active Directory attack path lab: real Vagrantfile (StefanScherer/windows_2022 eval boxes) with a promoted lab.local DC, member server and workstation, provisio
Web Application Hacking Challenges Pack
15 self-contained vulnerable web challenges (Flask + Dockerfile + SOLUTION.json): union, blind boolean and time-based SQLi, stored/reflected XSS, Jinja2 SSTI, b
Red Team Operations Playbook
Red team operations playbook: phase-based engagement workflow mapped to MITRE ATT&CK, OPSEC checklists per phase, finding/credential/host tracking with persiste
Cloud Penetration Testing Workshop
Cloud pentest workshop with 6 deployable Terraform labs (valid HCL): AWS IMDSv1 credential theft, AWS public S3, Azure Managed Identity + Key Vault, Azure publi
Exploit Development from Scratch
Exploit development from scratch: cyclic patterns, shellcode templates with XOR encoder, ROP gadget finder and chain builder, SEH helpers, format-string read/wr
Advanced Threat Emulation Scenarios
Advanced threat emulation scenarios: 5 playbooks (APT28 and Lazarus added) with MITRE mapping, detection notes, tooling guidance and report generation.