This project is a capture the flag platform and cybersecurity training environment. It provides a framework for deploying security challenges and tracking participant progress through a real-time scoring leaderboard.
The main features of google/google-ctf are: CTF Competition Hosting Platforms, Vulnerable Training Environments, Vulnerable Infrastructure, Security Competition Platforms, Real-Time Scoreboards, Cybersecurity Training Labs, Flag Validations, Security Challenges.
Open-source alternatives to google/google-ctf include: isislab/ctfd — CTFs as you need them. rapid7/metasploitable3 — Metasploitable3 is an automated virtual machine provisioner designed to build and deploy operating system images with… qazbnm456/awesome-web-security — This project serves as a comprehensive cybersecurity training platform and resource repository focused on web… orange-cyberdefense/goad — GOAD is an Ansible-based automation tool and infrastructure orchestrator used to deploy pre-configured networks of… juice-shop/juice-shop — Juice Shop is a self-contained web application designed as a platform for cybersecurity education and security… sundowndev/hacker-roadmap — Hacker Roadmap is a community-driven repository that functions as a structured learning path and resource directory…
Metasploitable3 is an automated virtual machine provisioner designed to build and deploy operating system images with intentional security weaknesses. It functions as a penetration testing lab by creating vulnerable virtual machine targets used for security training, exploit development, and the validation of security tools. The system uses configuration scripts to inject vulnerabilities into Windows and Linux environments. This includes the deployment of insecure applications and services, such as web servers and databases, and the application of misconfigured system permissions to simulate
This project serves as a comprehensive cybersecurity training platform and resource repository focused on web application security. It functions as a centralized hub for security practitioners, providing both a curated collection of technical documentation and research, and a system for deploying isolated, containerized environments to practice security analysis and exploitation techniques. The platform distinguishes itself by integrating automated data aggregation with hands-on, container-based orchestration. It maintains a current knowledge base of industry research and digital threats whil
GOAD is an Ansible-based automation tool and infrastructure orchestrator used to deploy pre-configured networks of vulnerable Windows virtual machines. It serves as a security training environment for practicing Active Directory penetration testing, privilege escalation, and lateral movement across various cloud platforms and local virtualization hypervisors. The project distinguishes itself through a multi-provider infrastructure model and a system of infrastructure recipes that simulate intentional security misconfigurations. It supports the deployment of varied attack scenarios, including