#1Capture The Flag platforms, challenge creation, solving tools, and competitive cybersecurity frameworks.
Kitploit recommended
alsaut1/react2shell-labCVE-2025-55182 React2Shell PoC lab
thestingr/reactoops-writeupHack The Box Writeup for Retired Challenge ReactOOPS - Complete solution and educational guide to CVE-2025-55182/CVE-2025-66478 (React2Shell RCE).…
atithkhawas/autoblueAutoBlue - Automated EternalBlue (CVE-2017-0144 / MS17-010) exploitation tool leveraging Nmap and Metasploit for ethical hacking, penetration…
deadexpl0it/wp2shell-pocwp2shell — WordPress Core Pre-Auth RCE Chain poc for CVE-2026-63030 and CVE-2026-60137
javokhir-sec/cve-poc-hub🛡️ CVE Proof-of-Concept Hub — 4 PUBLISHED CVEs · 5 under review (VulnCheck) · SuiteCRM batch withdrawn
hydr0nium/ctftoolsCurated database of CTF and pentesting tools with add/remove functionality, enabling quick access to community-vetted hacking utilities.
cberman/cve-2023-2822-demoSimple flask application to implement an intentionally vulnerable web app to demo CVE-2023-2822.
0xgh057r3c0n/cve-2025-6934CVE-2025-6934 is a critical vulnerability in the WordPress Opal Estate Pro plugin (<= 1.7.5) that allows unauthenticated attackers to create new…
sorcerio/code-rouletteCode Roulette is a terminal interface based (TUI), online multiplayer, Russian Roulette game where the loser executes the winner's Python payload…
dinosn/cve-2026-42945-nginx32-labCVE-2026-42945 nginx 32-bit exploit lab ASLR enabled
colere-sys/wp2shell-pocAnalysis and end-to-end implementation of the patched wordpress RCE vulnerability - CVE-2026-60137 and CVE-2026-63030
vulnmachines/metabase_cve-2021-41277Exploit for Metabase CVE-2021-41277, a local file inclusion vulnerability in custom GeoJSON map support, allowing unauthorized file access.
randomuser1983/ikeabuserA simple tool wrapper to automate the enumeration, fingerprinting, and PSK extraction of an IPSec VPN gateway.
trivulzianus/tarantubenchThe full repo of all the labs available as part of the benchmark
pithase/asm-copyfailCVE-2026-31431 (Copy Fail) — Análisis y desarrollo en Ensamblador x86-64 | Analysis and development in x86-64 Assembly
lockedbyte/cryptovenomCryptovenom: The Cryptography Swiss Army Knife
ageofalgorithms/mahoraga-webapp-defenderAI-powered reactive website defense system that detects attacks, analyzes them, and autonomously patches source code in real-time using LLM agents.
cybertechajju/cve-2025-57819Nuclei-based toolkit for detecting and validating the FreePBX authentication bypass vulnerability (CVE-2025-57819) with detection and exploit PoC…
