Skip to content

Cybersecurity Labs & Practice Platforms

Master cybersecurity through hands-on practice. From beginner-friendly networking labs to elite offensive security platforms - this is your complete guide to interactive learning environments updated for 2025.

Cisco Packet Tracer

Free
Networking Beginner

Free network simulation tool for routing and switching fundamentals

GNS3

Free
Networking Beginner

Open-source network emulator for building complex topologies

EVE-NG

Free/Paid
Networking Beginner

Network emulation platform supporting Cisco, Juniper, and more

Networking Academy (Cisco)

Free
Networking Beginner

Free networking courses with labs (CCNA, cybersecurity)

OverTheWire: Bandit

Free
Linux Beginner

Learn Linux command line basics through progressive challenges

Bash.Cybrary

Free
Linux Beginner

Interactive Bash scripting and Linux fundamentals

TryHackMe: Complete Beginner

Free/Paid
Fundamentals Beginner

Zero to hero learning path with guided rooms

TryHackMe: Pre Security

Free
Fundamentals Beginner

Networking, web, OS fundamentals before hacking

Hack The Box Academy: Introduction

Free/Paid
Fundamentals Beginner

Structured learning modules from ground zero

PicoCTF

Free
CTF Beginner

Beginner-friendly CTF by Carnegie Mellon for students

Google Gruyere

Free
Web AppSec Beginner

Learn web vulnerabilities with Google's intentionally vulnerable app

OWASP WebGoat

Free
Web AppSec Beginner

Self-paced lessons on OWASP Top 10 vulnerabilities

DVWA

Free
Web AppSec Beginner

Damn Vulnerable Web Application for practicing web attacks

Mutillidae

Free
Web AppSec Beginner

Intentionally vulnerable PHP web app with OWASP Top 10

Hack The Box (HTB)

Free/Paid
Pentesting Intermediate

Active and retired machines, realistic environments

TryHackMe: Offensive Pentesting

Paid
Pentesting Intermediate

Comprehensive pentesting methodology and tactics

TryHackMe: Red Teaming

Paid
Red Team Advanced

Advanced adversary emulation and red team operations

Hack The Box Academy: Penetration Tester

Paid
Pentesting Intermediate

Job-role focused penetration testing path

PentesterLab

Paid
Pentesting Intermediate

Hands-on exercises for web pentesting and privilege escalation

VulnHub

Free
Pentesting Intermediate

Downloadable vulnerable VMs for local practice

Proving Grounds (OffSec)

Paid
Pentesting Intermediate

OffSec's practice labs with OSCP-like machines

HackTheBox Labs

Paid
Pentesting Advanced

Enterprise-simulated Pro Labs (Dante, Zephyr, etc.)

Attack-Defense Labs

Free/Paid
Pentesting Intermediate

Scenario-based labs by Pentester Academy

PortSwigger Web Security Academy

Free
Web AppSec Intermediate

Free interactive labs for Burp Suite and web vulnerabilities

OWASP Juice Shop

Free
Web AppSec Intermediate

Modern vulnerable web app covering OWASP Top 10

bWAPP

Free
Web AppSec Intermediate

Buggy Web App with 100+ vulnerabilities

HackTheBox: Bug Bounty Hunter

Paid
Web AppSec Intermediate

Bug bounty hunting methodology and techniques

Kontra OWASP Top 10

Free
Web AppSec Intermediate

Interactive AppSec training for developers

Root Me

Free
CTF Intermediate

500+ challenges across web, network, forensics, crypto

TryHackMe: AD Basics

Free
Active Directory Intermediate

Introduction to Active Directory structure and attacks

TryHackMe: Attacking & Defending AD

Paid
Active Directory Advanced

Comprehensive AD attack techniques and detection

HackTheBox: AD Track

Paid
Active Directory Advanced

Deep dive into AD enumeration, exploitation, persistence

PentesterAcademy: AD Labs

Paid
Active Directory Advanced

CRTP/CRTE lab environment for AD attacks

GOAD (Game of AD)

Free
Active Directory Advanced

Free vulnerable AD lab with modern attack paths

Altered Security AD Labs

Paid
Active Directory Advanced

Enterprise AD pentesting simulation (CRTP/CRTE prep)

TryHackMe: AWS Pentesting

Free/Paid
Cloud Intermediate

Introduction to AWS security and common misconfigurations

HackTheBox: Cloud Pentester

Paid
Cloud Advanced

AWS, Azure, GCP attack techniques

Cloudgoat (AWS)

Free
Cloud Intermediate

Vulnerable AWS infrastructure scenarios

Flaws.cloud

Free
Cloud Intermediate

AWS security challenges and common mistakes

Flaws2.cloud

Free
Cloud Advanced

Advanced AWS security challenges (Attacker & Defender)

CONVEX

Free
Cloud Intermediate

Cloud Open-source Network Vulnerability Exploitation eXperience (Azure)

PentesterAcademy: AWS/Azure

Paid
Cloud Advanced

Cloud-specific pentesting bootcamps

A Cloud Guru Sandbox

Free/Paid
Cloud Beginner

Free temporary cloud environments for learning

Kubernetes Goat

Free
Kubernetes Intermediate

Intentionally vulnerable K8s cluster for learning

TryHackMe: Kubernetes

Free
Kubernetes Intermediate

K8s fundamentals and security basics

Killer.sh (CKS/CKA)

Paid
Kubernetes Advanced

Kubernetes certification exam simulator

Malware Unicorn Workshops

Free
Malware & RE Advanced

Reverse engineering malware workshops and resources

Practical Malware Analysis Labs

Free
Malware & RE Advanced

Companion labs for the book

Crackmes.one

Free
Reverse Engineering Intermediate

Reverse engineering challenges and crackmes

Reversing.kr

Free
Reverse Engineering Intermediate

Korean reversing challenges (all levels)

MalwareTech RE Tutorials

Free
Malware & RE Advanced

Malware analysis blog with practical examples

TryHackMe: DFIR

Paid
DFIR Intermediate

Digital forensics and incident response track

HackTheBox: SOC Analyst

Paid
DFIR Intermediate

Security operations and threat detection

CyberDefenders

Free
DFIR Intermediate

Blue team labs with forensic challenges

LetsDefend

Free/Paid
DFIR Intermediate

SOC analyst training with real-world incidents

BlueTeamLabs Online

Free/Paid
DFIR Intermediate

Incident response and threat hunting challenges

DFIR Madness

Free
DFIR Advanced

Digital forensics CTF challenges

Volatility Labs

Free
DFIR Advanced

Memory forensics practice samples

WiFi Hacking 101

Free
Wireless Intermediate

Wireless network attacks and WPA cracking (THM)

DVRF (Firmware)

Free
IoT Advanced

Damn Vulnerable Router Firmware for IoT exploitation

IoT Goat

Free
IoT Intermediate

Vulnerable IoT device environment

DIVA Android

Free
Mobile Intermediate

Damn Insecure and Vulnerable App for Android

OWASP iGoat

Free
Mobile Intermediate

Learning tool for iOS app pentesting

HackTheBox: Mobile Pentester

Paid
Mobile Advanced

Android and iOS security testing

Mobile Hacking Lab

Paid
Mobile Advanced

Real-world mobile app challenges

pwn.college

Free
Exploit Dev Advanced

ASU's comprehensive binary exploitation course

Exploit Education

Free
Exploit Dev Advanced

Protostar, Fusion, Phoenix exploit challenges

ROP Emporium

Free
Exploit Dev Advanced

Return-oriented programming challenges

Microcorruption

Free
Exploit Dev Advanced

Embedded security CTF

pwnable.kr

Free
Exploit Dev Advanced

Wargame for pwn/exploitation skills

pwnable.tw

Free
Exploit Dev Advanced

Taiwan-based binary exploitation wargame

RangeForce

Paid
Red Team Advanced

Enterprise cyber range with team-based scenarios

SANS NetWars

Paid
Red Team Advanced

Competitive cyber ranges and tournaments

Zero-Point Security Lab

Paid
Red Team Advanced

Red Team Ops lab environment (CRTO prep)

RastaLabs (HTB)

Paid
Red Team Expert

Red team simulation Pro Lab

CTFtime

Free
CTF All

Calendar and rankings of all CTF competitions

HackTheBox CTFs

Free
CTF Intermediate

Regular jeopardy and attack-defense CTFs

CTFlearn

Free
CTF Beginner

User-submitted CTF challenges

RingZer0 CTF

Free
CTF Intermediate

Online CTF with diverse challenges

INE Labs

Paid
Comprehensive Intermediate

eJPT, eCPPT, and other certification labs

Cybrary Labs

Paid
Comprehensive Intermediate

Virtual labs across multiple security domains

Immersive Labs

Paid
Comprehensive All

Enterprise cyber skills platform with labs

Offensive Security Labs

Paid
Pentesting Advanced

OSCP/OSEP/OSWE dedicated lab access