LabStore

Labs, apps and challenge machines — install with one click.

A public repository for Selfmade Ninja Labs. Browse here, install from the LabStore inside your instance, publish from your template designer.

Everything published to the store.

A Mafia Takedown PHP Environment XML External Entity Injection on vulnerable libxml by selfmade ✓ · challenge · ready Web Exploitation A Story of Cyber Espionage A Story of Online Intrigue and Cyber Sabotage by selfmade ✓ · challenge · ready Web Exploitation A Tale of Patches and Protection Security experts prevent RCE Webmin administration tool by selfmade ✓ · challenge · ready Web ExploitationRemote Code Execution AWS CloudTrail AWS CloudTrail audit logging and monitoring. by docker ✓ · mcp · 5 tools · installable SecurityMCP Servers AWS IAM IAM user, role, group, and policy management. by docker ✓ · mcp · 29 tools · installable SecurityMCP Servers Amazon DynamoDB Complete DynamoDB operations and table management. by docker ✓ · mcp · 8 tools · installable DatabasesMCP Servers Amazon ElastiCache ElastiCache control plane operations. by docker ✓ · mcp · 39 tools · installable DatabasesMCP Servers Amazon ElastiCache for Memcached High-speed caching with Memcached. by docker ✓ · mcp · 22 tools · installable DatabasesMCP Servers Amazon ElastiCache/MemoryDB for Valkey Advanced data structures with Valkey. by docker ✓ · mcp · 105 tools · installable DatabasesMCP Servers Amazon Neptune Graph database queries with Cypher and Gremlin. by docker ✓ · mcp · 4 tools · installable DatabasesMCP Servers Amazon Timestream for InfluxDB Time-series database operations. by docker ✓ · mcp · 26 tools · installable DatabasesMCP Servers Asgard Infotech Track the elusive scam operation `Asgard Infotech` targeting IT job seekers in Tamil Nadu by selfmade ✓ · challenge · ready Web ExploitationOSINT & Recon Asgardian Access Keys Journey through Asgard's digital realm, retrieving coveted cyber keys with Loki's cunning. by selfmade ✓ · challenge · ready Web Exploitation Astra DB An MCP server for Astra DB workloads. by docker ✓ · mcp · 19 tools · installable DatabasesMCP Servers Atlan MCP server for interacting with Atlan services including asset search, updates, and lineag by docker ✓ · mcp · 14 tools · installable DatabasesMCP Servers Backrooms In the dimly lit chatroom, Alex's whispered desperation echoed tales of others seeking sec by selfmade ✓ · challenge · builds on install Web ExploitationPrivilege Escalation Chronicles of Digital Revelation Uncovering hidden secrets and solving enigmatic puzzles along the way, happy hacking :) by selfmade ✓ · challenge · ready Web ExploitationNetworkForensics Chronicles of the Cryptic Server Join Jack on a cryptic server journey, uncovering secrets and thrilling discoveries by selfmade ✓ · challenge · ready Web ExploitationNetworkPrivilege Escalation Clash Of Challenges Clash of Challenges: Conquer, Defend, and Outwit in Epic Clash Battles by selfmade ✓ · challenge · ready Web ExploitationAPI AbuseSUID & Sudo CockroachDB Enable AI agents to manage, monitor, and query CockroachDB using natural language. Perform by docker ✓ · mcp · 29 tools · installable DatabasesMCP Servers Coldfusion: Tale of a Agent's Success Directory traversal vulnerability in Adobe ColdFusion via manipulation of certain paramete by selfmade ✓ · challenge · ready Web Exploitation Consequences of Directory Traversal A vulnerable lab ready to be exploited with by selfmade ✓ · challenge · ready Web Exploitation Couchbase Couchbase is a distributed document database with a powerful search engine and in-built op by docker ✓ · mcp · 20 tools · installable DatabasesMCP Servers Crack The ArmsNet Hack into arms dealer's site, expose operations with Tamil Nadu Police. by selfmade ✓ · challenge · builds on install Web ExploitationBinary Exploitation CryptoMatrix Puzzle Tech-savvy Sarah uncovers flaws, aiding friend's startup's online security by selfmade ✓ · challenge · ready Web Exploitation Data Dive Adventure A mining village thrives, yet grapples with environmental and social challenges. by selfmade ✓ · challenge · ready Web ExploitationPath Traversal Defend Planet from Cyberattack Alien hackers thwart cyberattack, secure planet's infra by selfmade ✓ · challenge · ready Web ExploitationScripting & Programming Defend Planet from Cyberattack Alien hackers thwart cyberattack, secure planet's infrastructure. by selfmade ✓ · challenge · ready Web ExploitationRemote Code Execution Detective The antidote is hidden deep within a research database. Use complex queries to retrieve it by selfmade ✓ · challenge · builds on install Web ExploitationBinary ExploitationPrivilege Escalation Digital Deception Unraveled A secret mission to uncover the digital deception of a fraudster and his friend, aiding Ta by selfmade ✓ · challenge · builds on install Web ExploitationOSINT & Recon Digital Detective Decrypt clues, expose a criminal, and solve a digital mystery, unveiling the shadowy figu by selfmade ✓ · challenge · builds on install Web ExploitationBinary Exploitation Digital Elysium A vulnerable lab ready to be exploited with SSTI by selfmade ✓ · challenge · ready Web Exploitation Digital Evidence Investigation Join the Tamil Nadu Police Cyber Crime Investigation as a digital forensics expert. Analyz by selfmade ✓ · challenge · ready ForensicsHeap ExploitationNetwork Digital Maayai From fraud to footprints, the hunt for the unseen begins. by selfmade ✓ · challenge · ready Web ExploitationPrivilege Escalation Digital Trail Pursuit Unravel digital clues to expose a clandestine drug network. by selfmade ✓ · challenge · builds on install Web ExploitationSteganography Disrupting the Dark Army Invade the infamous Dark Army, a dangerous cyber-crime organization, infiltrate it, and st by selfmade ✓ · challenge · builds on install Web ExploitationPrivilege Escalation Doomsday Archiver Explore the Doomsday Archiver, a vulnerable web app that clones and archives Git repos. Ex by selfmade ✓ · challenge · builds on install Web ExploitationOSINT & Recon Doomsday Archiver Explore the Doomsday Archiver, a vulnerable web app that clones and archives Git repos. Ex by selfmade ✓ · challenge · ready Web ExploitationPrivilege Escalation DreamFactory DreamFactory is a REST API generation platform with support for hundreds of data sources, by docker ✓ · mcp · 8 tools · installable DatabasesMCP Servers E-Corp's Enigma Explore cryptic challenges, mimic Elliot's journey, and uncover hidden flags in this Mr. by selfmade ✓ · challenge · ready Web ExploitationNetworkBinary Exploitation E-Shop Security Saga by selfmade ✓ · challenge · ready Web ExploitationPrivilege EscalationXSS Eldoria: The Lost Archives by selfmade ✓ · challenge · ready Web Exploitation Electric Apocalypse Spiderman and Ganke unite against Kingpin to thwart his 'Grid Wrecker' and save New York f by selfmade ✓ · challenge · builds on install Web Exploitation Enchanted Wizardry Quest Embark on a Harry Potter-themed journey, unlock characters, and defeat enemies through mys by selfmade ✓ · challenge · ready Web ExploitationMiscellaneousSUID & Sudo Enigmatrail Enigmatrail is a lab build to test your knowledge in encryption and decryption by selfmade ✓ · challenge · builds on install Web ExploitationCryptography Escape the Tetris In 1985, a Russian government software engineer created a game for personal entertainment by selfmade ✓ · challenge · ready Web ExploitationIDOR & Access Control Essentials Lab A Ubuntu 24.10 lab packed with all the essentials to code, host, build, and develop, with by selfmade ✓ · app · ready DevelopmentIDE & Code ServerWeb Servers Excellent In the digital shadows, You a lone hacker uncovers the truth behind Seb's Pharmacy, reveal by selfmade ✓ · challenge · builds on install Web ExploitationRemote Code Execution Exploiting OGNL Injection Vulnerability Injection attack through user input validation. by selfmade ✓ · challenge · ready Web ExploitationNetwork Expoliting jenkins An unauthenticated remote code execution vulnerability allowed attackers to transfer a ser by selfmade ✓ · challenge · builds on install Web ExploitationRemote Code Execution Exposing the War Profiteers A vulnerable lab ready to be exploited with RCE by selfmade ✓ · challenge · ready Web ExploitationRemote Code Execution Firewalla Real-time network monitoring, security analysis, and firewall management through 28 specia by docker ✓ · mcp · 28 tools · installable SecurityMCP Servers Flight To Break by selfmade ✓ · challenge · ready Web ExploitationMiscellaneous Fruity Aditya owns a successful fruit drink company, and his business website usually receives ma by selfmade ✓ · challenge · builds on install Web ExploitationPrivilege Escalation Ghost Pivot Trace the attacker’s path to understand how they infiltrated, so we can prevent it from ha by selfmade ✓ · challenge · ready Web ExploitationNetworkPrivilege Escalation Got The Evidence by selfmade ✓ · challenge · builds on install Web ExploitationSQL InjectionXSS Grafana Path Triumph A Tale of Clever problem solvers and hidden secrets by selfmade ✓ · challenge · ready Web Exploitation Hack The Fakenews Unravel fake news site secrets with Tamil Nadu Police. by selfmade ✓ · challenge · builds on install Web ExploitationBinary ExploitationSUID & Sudo Hijacking Darkforum Two-stage web penetration challenge. Bypass authentication mechanisms on a darknet forum, by selfmade ✓ · challenge · ready Web ExploitationBinary Exploitation Hogwarts in Peril In a race against dark forces, players join Hermione Granger to safeguard Hogwart's secret by selfmade ✓ · challenge · builds on install Web ExploitationPrivilege Escalation Holiday Hack Voyage Embark on a festive cyber journey, helping Santa navigate through various digital challen by selfmade ✓ · challenge · ready Web ExploitationBinary ExploitationSSRF Infiltration Account Heist Hack into rogue developer's account, uncover illegal transactions, assist police by selfmade ✓ · challenge · builds on install Binary ExploitationWeb ExploitationAuthentication Bypass InkSecure Infiltration Unleash your story's cinematic essence with CinePosterCraft – where moments become persona by selfmade ✓ · challenge · ready Web ExploitationRemote Code Execution Java Dev Server Java Development Server: Code, host, build, develop with root access over the browser by selfmade ✓ · app · builds on install DevelopmentDesktop & GUIIDE & Code Server Kafka Schema Registry Comprehensive MCP server for Kafka Schema Registry operations. Features multi-registry sup by docker ✓ · mcp · 29 tools · installable DatabasesMCP Servers Kali Linux Kali Linux Desktop that can run on your browser accelerated by SNA Labs with all default t by selfmade ✓ · app · ready Pentesting & OffensiveSecurityDesktop & GUI Kali Machine Embark on a digital quest blending Tamil Nadu's heritage with cutting-edge cybersecurity c by selfmade ✓ · challenge · builds on install Web ExploitationRemote Code Execution Lost in the Woods A hacker exploits SafeVault's vulnerability. by selfmade ✓ · challenge · ready Web ExploitationRemote Code Execution MCP Database Server Comprehensive database server supporting PostgreSQL, MySQL, and SQLite with natural langua by docker ✓ · mcp · 7 tools · installable DatabasesMCP Servers Matrix Mastery Zone Step into the world of code and imagination, where your hacker spirit thrives! by selfmade ✓ · challenge · ready Web Exploitation MongoDB A Model Context Protocol server to connect to MongoDB databases and MongoDB Atlas Clusters by docker ✓ · mcp · 25 tools · installable DatabasesMCP Servers MySQL WebBench MySQL WebBench is an advanced MySQL GUI that provides full MySQL Workbench capabilities ac by selfmade ✓ · app · builds on install Database ToolsDatabasesDesktop & GUI NFT Vending Site Explore this un-official NFT vending site, where the Admin sells the NFT's for higher pric by selfmade ✓ · challenge · ready Web ExploitationCryptography NarcoHarbor An OSINT investigation to dismantle a drug syndicate shipping 200kg of illegal substances by selfmade ✓ · challenge · ready Web ExploitationOSINT & Recon Neon MCP server for interacting with Neon Management API and databases. by docker ✓ · mcp · 19 tools · installable DatabasesMCP Servers Official ClickHouse Official ClickHouse MCP Server. by docker ✓ · mcp · 3 tools · installable DatabasesMCP Servers Operation Tone Breaker A critical breach at a secure tech firm began with a mysterious audio signal. Decode this by selfmade ✓ · challenge · ready Web ExploitationSteganographyForensics Oracle Database Connect to Oracle databases via MCP, providing secure read-only access with support for sc by docker ✓ · mcp · 13 tools · installable DatabasesMCP Servers PHP 8.1.0-dev User-Agentt Backdoor PHP version 8.1.0-dev was implanted with a backdoor on March 28, 2021, but the backdoor wa by selfmade ✓ · challenge · ready Web Exploitation Penetrating the Private Network A vulnerable lab ready to be exploited with RCE by selfmade ✓ · challenge · ready Web ExploitationRemote Code Execution Phines and Ferb Let's help Phineas save his friend trapped in a time machine with an access key. by selfmade ✓ · challenge · ready Web ExploitationRemote Code Execution Pickle Portal by selfmade ✓ · challenge · builds on install Web ExploitationPrivilege Escalation Pied Piper's Infiltrate Pied Piper's digital fortifications to unearth and secure elusive secrets by selfmade ✓ · challenge · builds on install Web ExploitationPrivilege Escalation Pinecone Assistant Pinecone Assistant MCP server. by docker ✓ · mcp · 1 tools · installable DatabasesMCP Servers Protecting the Kingdom's Servers Dragon protects kingdom's servers, retrieves flag. by selfmade ✓ · challenge · ready Web ExploitationRemote Code Execution Puzzle of ShadowNet Check leaked data to see what's out and how it leaked. by selfmade ✓ · challenge · ready Web ExploitationAPI Abuse Ramparts Security Scanner A comprehensive security scanner for MCP servers with YARA rules and static analysis capab by docker ✓ · mcp · 2 tools · installable SecurityMCP Servers Recipe Riddle Chase The riddle's solution reveals the hiding place of the stolen recipe. by selfmade ✓ · challenge · ready Web ExploitationPath Traversal Redis Access to Redis database operations. by docker ✓ · mcp · 53 tools · installable DatabasesMCP Servers Redis Cloud MCP Server for Redis Cloud's API, allowing you to manage your Redis Cloud resources using by docker ✓ · mcp · 18 tools · installable DatabasesMCP Servers Rogue hackers' futuristic rise and fall. Skilled programmers upgrade AI security to stop hackers and stress the need to stay ahead by selfmade ✓ · challenge · ready Web ExploitationNetwork Rons Coffee Expose Rons Coffee's crimes by decoding secrets in digital realm by selfmade ✓ · challenge · ready Web ExploitationSteganographySUID & Sudo SQLite (Archived) Database interaction and business intelligence capabilities. by docker ✓ · mcp · 6 tools · installable DatabasesMCP Servers Saving the Titanic In this thrilling tale of innovation and determination, a brilliant hacker races against t by selfmade ✓ · challenge · ready Web ExploitationFile Upload Saving the Titanic In this thrilling tale of innovation and determination, a brilliant hacker races against t by selfmade ✓ · challenge · ready Web Exploitation SchemaCrawler AI The SchemaCrawler AI MCP Server enables natural language interaction with your database sc by docker ✓ · mcp · 8 tools · installable DatabasesMCP Servers Secrets Unlocked Unexpected hero conquers challenges, uncovers hidden treasures. by selfmade ✓ · challenge · ready Web ExploitationFile Upload Securitron Enigma Hidden in code lies the doorway to a digital adventure by selfmade ✓ · challenge · ready Web Exploitation Send the Alien back home A vulnerable lab ready to be exploited with Path Traversal! by selfmade ✓ · challenge · ready Web ExploitationPath Traversal Shadow Market As a key member of the CyberDefenders, take on a pivotal role in the strategic takedown of by selfmade ✓ · challenge · builds on install Web ExploitationRemote Code Execution Singlestore MCP server for interacting with SingleStore Management API and services. by docker ✓ · mcp · 28 tools · installable DatabasesMCP Servers Stollen Thiraikathai Recover the keys from a sabotaged laptop and hack the pirate's server before the blockbust by selfmade ✓ · challenge · builds on install OSINT & ReconWeb Exploitation Struts RCE Vulnerability Hacker races to find hidden flag first. by selfmade ✓ · challenge · builds on install Web ExploitationRemote Code Execution Thamirabarani Exchange Operation Thamirabarani: Infiltrate the Thamirabarani Exchange logistics platform across t by selfmade ✓ · challenge · ready Web ExploitationBinary Exploitation The Binary Heist Journey of a young hacker from script kiddie to cyber defender, showcasing power in securi by selfmade ✓ · challenge · ready Binary ExploitationNetworkFormat String The Cryptic Code Curse Ghost Script Command Execution Vulnerability. by selfmade ✓ · challenge · ready Web Exploitation The Cyber Conspiracy by selfmade ✓ · challenge · builds on install Web Exploitation The Cyber Jallikattu Embark on a digital quest blending Tamil Nadu's heritage with cutting-edge cybersecurity c by selfmade ✓ · challenge · builds on install Web ExploitationMiscellaneousRemote Code Execution The Digital Manhunt Hunt a digital ghost through hidden online trails where every clue brings you closer to th by selfmade ✓ · challenge · ready Web ExploitationOSINT & Recon The Enigma of DarkWeb Data Leaks You'll start by examining the leaked data to identify what has been compromised and how it by selfmade ✓ · challenge · ready Web ExploitationAPI Abuse The Great Quest Humanity's last stand against impending alien invasion, Earth's Final Defense by selfmade ✓ · challenge · ready Web ExploitationScripting & Programming The Intern's Conundrum by selfmade ✓ · challenge · builds on install Web ExploitationPath TraversalReverse Engineering The Last Stand: Struts2 vs. Alien Invaders Hack Struts2, save world from alien invasion. by selfmade ✓ · challenge · builds on install Web ExploitationRemote Code Execution The Leaky Blog A well-known journalist has been investigating corporate corruption, but her confidential by selfmade ✓ · challenge · builds on install Web Exploitation The Search for the Truth Begins A vulnerable lab ready to Exploiting a directory traversal vulnerability to gain access to by selfmade ✓ · challenge · ready Web ExploitationPath Traversal The Ticket Your task is to stop a suspect, who is a web dev by day and a serial killer by night, from by selfmade ✓ · challenge · builds on install Web ExploitationPrivilege Escalation The betrayal Someone she trusted is now blackmailing her. Can you find the digital evidence to prove wh by selfmade ✓ · challenge · ready Web ExploitationOSINT & Recon Ubuntu Jammy LTS Ubuntu Desktop GUI Lab: Code, host, build, develop with root access over the browser by selfmade ✓ · app · ready Desktop & GUIOperating SystemsDevelopment Unanswered Question Explore cyber challenges,figure out the solution for an unsolved question, and uncover hid by selfmade ✓ · challenge · builds on install Web ExploitationPrivilege Escalation Uncovering Alien Intelligence Decode hidden messages in media using skills in Steganography CTF challenge. by selfmade ✓ · challenge · ready Web ExploitationSteganographyNetwork Uncovering the Partner's Secrets Uncovering missing partner's secret leads to dangerous organization by selfmade ✓ · challenge · ready Web Exploitation Uncovering the Partner's Secrets A vulnerable lab ready to be exploited with Directory Traversal! by selfmade ✓ · challenge · ready Web ExploitationRemote Code Execution Virtual Bomb Threat A heroic journey where you crack codes and solve puzzles to stop a hacker threatening Tami by selfmade ✓ · challenge · builds on install Web ExploitationCryptography Wedding Fusion Experience pre-wedding excitement and digital security for romances by selfmade ✓ · challenge · ready Privilege EscalationWeb ExploitationIDOR & Access Control Wordpress Cyber police defuse a hacker's virtual bombs to protect the city. by selfmade ✓ · challenge · builds on install Web ExploitationNetwork Zeal Engine Welcome to ZealMath! An interactive math server powered by Zeal Engine. by selfmade ✓ · challenge · ready Web ExploitationPrivilege Escalation Zombie Breakout The antidote is hidden deep within a research database. Use complex queries to retrieve it by selfmade ✓ · challenge · builds on install Web ExploitationPrivilege Escalation Zorion Cyberattack Earth faces Zorion cyberattack, exploit vulnerability. by selfmade ✓ · challenge · ready Web ExploitationRemote Code Execution Zscaler Manage the Zscaler Zero Trust Exchange platform via 300+ tools across ZPA (private access) by docker ✓ · mcp · 300 tools · installable SecurityMCP Servers gcc3 Exploit Lab A vulnerable lab ready to be exploited because of compiler version changes. by selfmade ✓ · machine · ready SecurityPentesting & OffensiveDevelopment mystery_078 The fate of the city rests on your ability to trace a ghost's digital footsteps and crack by selfmade ✓ · challenge · ready Web ExploitationOSINT & Recon thefir Journey through Asgard's digital realm, retrieving coveted cyber keys with Loki's cunning. by selfmade ✓ · challenge · builds on install Web Exploitation