Skip to content
@CyberCTF

Cyber CTF

Lab templates and Active Directory labs for CyberCTF, run with Isoloom.

CyberCTF

CyberCTF is an organization that builds capture-the-flag (CTF) labs. Its labs are described as deployable environments (Docker, VM, home lab, AWS) and are run with Isoloom.

Popular repositories Loading

  1. Lab-Template Lab-Template Public template

    The single CyberCTF lab template: one compose file, every target (Docker, VM, home lab, AWS)

    Shell

  2. invoice-portal-api invoice-portal-api Public

    Supplier portal API: a CyberCTF lab (read an authenticated REST API)

    HCL

  3. goad goad Public

    GOAD (Game of Active Directory) full lab, run with Isoloom

    PowerShell

  4. goad-mini goad-mini Public

    GOAD-Mini (Game of Active Directory), run with Isoloom

    PowerShell

  5. goad-light goad-light Public

    GOAD-Light (Game of Active Directory), run with Isoloom

    PowerShell

  6. nha nha Public

    NHA (Game of Active Directory), run with Isoloom

    JavaScript

Repositories

Showing 10 of 379 repositories
  • adlab-xbufu Public

    ADLab (xbufu): an Active Directory lab with roastable users and an ACL path to Domain Admins, run with Isoloom

    CyberCTF/adlab-xbufu's past year of commit activity
    PowerShell 0 MIT 0 0 0 Updated Oct 11, 2026
  • badblood Public

    BadBlood: an Active Directory domain filled with thousands of random users, groups and ACLs, run with Isoloom

    CyberCTF/badblood's past year of commit activity
    PowerShell 0 GPL-3.0 0 0 0 Updated Oct 11, 2026
  • vulnerable-ad-plus Public

    vulnerable-AD-plus: a randomized vulnerable Active Directory with chained attack paths, run with Isoloom

    CyberCTF/vulnerable-ad-plus's past year of commit activity
    PowerShell 0 MIT 0 0 0 Updated Oct 11, 2026
  • vulnerable-ad Public

    vulnerable-AD: a randomized vulnerable Active Directory domain controller, run with Isoloom

    CyberCTF/vulnerable-ad's past year of commit activity
    PowerShell 0 MIT 0 0 0 Updated Oct 11, 2026
  • vulnserver Public

    Vulnserver: a Windows TCP server full of buffer overflows for exploit development practice, run with Isoloom

    CyberCTF/vulnserver's past year of commit activity
    HCL 0 BSD-3-Clause 0 0 0 Updated Oct 11, 2026
  • metasploitable3-windows Public

    Metasploitable 3 (Windows): Rapid7's vulnerable Windows Server 2008 R2, run with Isoloom

    CyberCTF/metasploitable3-windows's past year of commit activity
    HTML 0 0 0 0 Updated Oct 11, 2026
  • metasploitable3-linux Public

    Metasploitable 3 (Linux): Rapid7's vulnerable Ubuntu 14.04 server built by its own Chef cookbooks, run with Isoloom

    CyberCTF/metasploitable3-linux's past year of commit activity
    HTML 0 0 0 0 Updated Oct 11, 2026
  • webgoat-php Public

    OWASP WebGoatPHP: PHP port of WebGoat with lesson challenges, run with Isoloom

    CyberCTF/webgoat-php's past year of commit activity
    PHP 0 Apache-2.0 0 0 0 Updated Oct 11, 2026
  • hackademic Public

    OWASP Hackademic Challenges: PHP web security training challenges, run with Isoloom

    CyberCTF/hackademic's past year of commit activity
    PHP 0 GPL-3.0 0 0 0 Updated Oct 11, 2026
  • dvta Public

    DVTA: Damn Vulnerable Thick Client App on Windows Server 2019 with SQL Server Express and FTP, run with Isoloom

    CyberCTF/dvta's past year of commit activity
    HCL 0 MIT 0 0 0 Updated Oct 11, 2026

Top languages

Loading…

Most used topics

Loading…