This is an awesome list of resources related to teaching cybersecurity, primarly to running Capture the Flag games for educational purposes. The resources are divided into categories and sorted alphabetically within each category.

• CTFd – an open-source CTF platform
• CTFtime – a public directory of all CTFs organized currently or in the past
• CTF Field Guide – an online book about preparing for CTFs

• Avatao – challenges to practice cybersecurity skills
• Damn Vulnerable Web Application (DVWA) – a PHP/MySQL web application containing various vulnerabilities
• Exploit Exercises – virtual machines and challenges to practice security exploits
• Hack Me – a community platform for building, hosting and sharing vulnerable web app code
• Hack The Box – a community platform with hacking challenges
• Hack This Site – training ground for hackers including a community forum
• Hack This!! – challenges to practice cryptography, forensics, JavaScript, SQL, and more
• Hacker Test – challenges to practice JavaScript, PHP, HTML and graphic thinking
• Root Me – challenges to practice hacking skills
• Secure Code Warrior – security learning resources and challenges
• Wargames – games for practicing hacking skills

• Cybrary – free online security courses
• Cyber Security Degrees – lists of scholarships, degree programs, and certifications in the USA
• eLearnSecurity – paid online security courses
• ENISA Training Resources – educational resources
• Exploit Database – archive of exploits
• Hacker101 – free, open-source video lessons on web security
• Hacksplaining – vulnerabilities explained simply
• Open Security Training – free, open-source materials for computer security classes
• PortSwigger – free, online web security training with basic and advanced topics and hands-on labs
• SANS – professional paid information security training
• SANS Cyber Aces – video tutorials with handouts and quizzes
• Teaching Security – ready-made materials for classrooms

• Awesome Security List – a major list on everything security-related
• Penetration Testing Practice Lab – a roadmap for vulnerable apps and systems
• Practice CTF List – CTF practice sites and tools
• TeachCyber – a list of free online resources
• WeChall – a list of web challenges and practice sites

We highly appreciate new contributions, suggestions for improvement, or any other comments.
Please email Valdemar Švábenský at [email protected].

This list was compiled and is maintained by the members of the CSIRT-MU team at the Masaryk University.

This work is licensed under a CC0 (Public Domain) License. Feel free to use it in any way.