🧪 CyberCopilot Hacking Lab

Personal Penetration Testing & Vulnerability Research Sandbox

BEGINNER • PHP/MYSQL

DVWA ONLINE

Damn Vulnerable Web Application. Classic practice for SQLi, XSS, Command Injection, and CSRF.

Open Target →
MODERN • NODE/ANGULAR

OWASP Juice Shop ONLINE

Full OWASP Top 10 coverage with built-in score board, JWT flaws, and BOLA/IDOR challenges.

Open Target →
INTERMEDIATE • JAVA/SPRING

WebGoat ONLINE

Deliberately insecure application maintained by OWASP designed to teach web application security lessons.

Open Target →
SHELL ACCESS • SSH

Web Terminal ONLINE

In-browser terminal powered by Wetty. Execute nmap, curl, and network diagnostic tools directly.

Launch Terminal →