#1Capture The Flag platforms, challenge creation, solving tools, and competitive cybersecurity frameworks.
Kitploit recommended
lockedbyte/cryptovenomCryptovenom: The Cryptography Swiss Army Knife
ageofalgorithms/mahoraga-webapp-defenderAI-powered reactive website defense system that detects attacks, analyzes them, and autonomously patches source code in real-time using LLM agents.
cybertechajju/cve-2025-57819Nuclei-based toolkit for detecting and validating the FreePBX authentication bypass vulnerability (CVE-2025-57819) with detection and exploit PoC…
noraj/hacker-profilePersonal hacker profile page showcasing CTF achievements, cybersecurity projects, and curated resources. Built with Middleman and Gulp for static…
dcheng69/cve-2022-0185-case-studyEducational case study and exploit development walkthrough for CVE-2022-0185, a Linux kernel heap-based buffer overflow enabling local privilege…
mrdark-ops/cve-2026-38526Python PoC exploiting CVE-2026-38526 in Krayin CRM <= 2.2.x: authenticates, uploads a PHP webshell via /admin/tinymce/upload, and executes commands…
symphony2colour/htb-pterodactyl-rce-cve-2025-49132This repo contains RCE exploit for Pterodactyl htb machine
abraxas/gatexFortinetHunter (@YogSoth0) binary cracking application. Part of CTF for FortinetHunter. ELF door: a stripped Nuitka onefile, an XOR-scrambled…
abdelhakimgafernetworksec/enigm-writeupComprehensive penetration testing write-up and exploit details for Hack The Box - Enigma machine, covering local enumeration, OliveTin CVE-2026-27626…
flojboj/cve-2022-0944SQLPad - Template injection (POC exploit for SQLPad RCE [CVE-2022-0944])
s3v3n-jg/cve-2026-76461Intentionally vulnerable Python lab demonstrating unsafe YAML deserialization leading to code execution, with three difficulty levels, exploit…
dheeraj-jayaswal/cicd-goat-vapt-writeupFull VAPT writeup of OWASP CICD-Goat — 9 CTFd flags captured, 4 critical + 5 high findings (incl. CVE-2024-23897) mapped to the OWASP Top 10 CI/CD…
germarr93/cybersecurity-pentest-labCVE-2004-2687 (Distcc 3.2.1) exploitation, methodology & remediation — Metasploitable2 lab
w1ngless/cve-2021-39172-rceCachet 2.4 Code Execution via Laravel Configuration Injection CVE-2021-39172
cpu0x00/cve-2021-3560ubuntu new PrivEsc race condition vulnerability
cheese-hub/heartbleedEducational Docker-based lab demonstrating the Heartbleed bug (CVE-2014-0160) with hacker, victim, and server containers for hands-on exploitation…
jas502n/ctfCurated collection of CTF competition challenges for cybersecurity training and practice.
0xblackash/cve-2026-43494CVE-2026-43494
