> For the complete documentation index, see [llms.txt](https://martian1337.gitbook.io/notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://martian1337.gitbook.io/notes/training-and-career/platforms/offensive-security.md).

# Offensive Security

## Web Training Environments

| [Alert to win](https://alf.nu/alert1)                                                                 | [Attack-Defense](https://attackdefense.com/)                                                          | [Buggy Web App bWAPP](http://itsecgames.com)                                             | [Certified Secure](https://www.certifiedsecure.com)                                                                 |
| ----------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------- |
| [Ctftime](https://ctftime.org/)                                                                       | [CTF Writeups from IgniteTechnologies](https://github.com/Ignitetechnologies/HackTheBox-CTF-Writeups) | [CryptoHack](https://cryptohack.org/)                                                    | [CMD Challenge](https://cmdchallenge.com/)                                                                          |
| [Exploitation Education](https://exploit.education/)                                                  | [flAWS Cloud vulnerable app](http://flaws.cloud/)                                                     | [Google CTF](https://capturetheflag.withgoogle.com/)                                     | [Hackaflag BR](https://hackaflag.com.br/)                                                                           |
| [HackTheBox](https://www.hackthebox.com/) !                                                           | [Hackthis](https://www.hackthis.co.uk/)                                                               | [Hacksplaining](https://www.hacksplaining.com/lessons)                                   | [Hacker101](https://ctf.hacker101.com/)                                                                             |
| [Hacker Security](https://hackersec.com/capture-the-flag-ctf/)                                        | [Hacking-Lab](https://hacking-lab.com/)                                                               | [HackXpert](https://hackxpert.com/)                                                      | [HSTRIKE](https://hstrike.com/)                                                                                     |
| [ImmersiveLabs](https://immersivelabs.com/)                                                           | [KaliTut Linux and Pentesting blog](https://kalitut.com/) !                                           | [LetsDefend](https://letsdefend.io/)                                                     | [NewbieContest](https://newbiecontest.org/)                                                                         |
| [Nightmare - learn binary exploitation / reverse engineering skills](https://guyinatuxedo.github.io/) | [OSBOXES](http://www.osboxes.org/)                                                                    | [OverTheWire](http://overthewire.org/) !                                                 | [OWASP Vulnerable-Web-Applications-Directory](https://owasp.org/www-project-vulnerable-web-applications-directory/) |
| [Practical Pentest Labs](https://practicalpentestlabs.com/)                                           | [Pentesterlab](https://pentesterlab.com/)!                                                            | [Penetration Testing Practice Labs](https://www.amanhardikar.com/mindmaps/Practice.html) | [PicoCTF](https://picoctf.com/) !                                                                                   |
| [PortSwigger Web Security Academy](https://portswigger.net/web-security)                              | [PWNABLE](https://pwnable.kr/play.php)                                                                | [Pwn college Web Security](https://pwn.college/intro-to-cybersecurity/web-security/)     | [RangeForce](https://www.rangeforce.com/)                                                                           |
| [Ringzer0 CTF](https://ringzer0ctf.com/challenges)                                                    | [Root-Me](https://www.root-me.org/)                                                                   | [Root in Jail](http://rootinjail.com/)                                                   | [SANS Challenger](https://www.holidayhackchallenge.com/)                                                            |
| [Security Knowledge Framework](https://securityknowledgeframework.org/)                               | [SmashTheStack](https://www.smashthestack.org/wargames.html)                                          | [TCM Security Academy](https://academy.tcm-sec.com/) !                                   | [The Cryptopals Crypto Challenges](https://cryptopals.com/)                                                         |
| [Tryhackme](https://tryhackme.com/)                                                                   | [Vulnhub](https://www.vulnhub.com/) !                                                                 | [W3Challs](https://w3challs.com/)                                                        | [WeChall](http://www.wechall.net/)                                                                                  |
| [XSS Challenges from @moeinfatehi](https://github.com/moeinfatehi/xss_vulnerability_challenges)       | [Zenk-Security](https://www.zenk-security.com/)                                                       | [Zero-Point Security](https://training.zeropointsecurity.co.uk/)                         | [Vulnlab](https://vulndev.io/lab/)                                                                                  |

## System Exploit Development

|                              |                                       |                                             |
| ---------------------------- | ------------------------------------- | ------------------------------------------- |
| <https://exploit.education/> | <https://ir0nstone.gitbook.io/notes/> | [https://pwn.college](https://pwn.college/) |
|                              |                                       |                                             |