#1Capture The Flag platforms, challenge creation, solving tools, and competitive cybersecurity frameworks.
Kitploit recommended
vulnquest58/vq-refluxcoreis an advanced security research framework designed to model, analyze, and demonstrate Local Privilege Escalation (LPE) mechanics associated with…
r4y-br/cve-2022-22963Python automation script that reproduces CVE-2022-22963, a critical SpEL injection in Spring Cloud Function, enabling reverse shell in authorized lab…
fernandocassiodev/cve-2015-1328Step-by-step walkthrough for exploiting CVE-2015-1328 (OverlayFS) to escalate privileges from a low-privileged user to root on Ubuntu 14.04. Includes…
6t2kydmp8k-jpg/cve-2025-55182-vulnerability-proof-of-concept-group-project-Proof-of-concept exploit for CVE-2025-55182, demonstrating vulnerability exploitation techniques for educational and penetration testing purposes.
ahmetaltuntas/cve-2023-28467Proof-of-concept for a persistent XSS vulnerability in MyBB 1.8.33 User CP, allowing authenticated users to inject HTML via the email field, with…
d1se0/cve-2024-10924-bypass-mfa-wordpress-labLab environment and exploit script for CVE-2024-10924, demonstrating MFA bypass in WordPress via the Really Simple SSL plugin's skip_onboarding…
joaovicdev/exploit-cve-2026-63030Docker-based vulnerable WordPress lab with Python exploit demonstrating pre-auth route confusion and SQL injection chain (CVE-2026-63030 +…
horkimhab/cve-2026-74469Proof-of-concept and educational research repository for CVE-2026-74469 (DiagSpill), providing vulnerability analysis material for authorized lab…
gh0stuncle/cve-2018-16763_fuel_cms_exploitA fuel CMS exploit based on Python for RCE mentioned in CVE-2018-16763.
cves-labs/cve-2026-21877Dockerized vulnerable lab environment with a Python-based network monitor and dedicated exploit script, enabling hands-on exploitation, privilege…
cyb3rk0ala/thm-magnusbilling-cve-2023-30258-exploitStep-by-step walkthrough exploiting CVE-2023-30258 (MagnusBilling RCE) and escalating privileges via fail2ban misconfiguration on a TryHackMe lab.…
adfortunato/metasploitable3-pentest-writeupHome-lab penetration test report of Metasploitable3 covering Nmap recon, Drupalgeddon RCE, SQL injection, SSH credential reuse, sudo privilege…
alardiians/gitea-cve-2026-28699Lab + writeup for CVE-2026-28699: Gitea OAuth2 scope enforcement bypass via HTTP Basic auth
danreis20/pentest-lab-metasploitable2Laboratório de pentest em rede isolada: enumeração com nmap/nikto e exploração manual do Metasploitable2 (backdoor vsFTPd CVE-2011-2523, bindshell)…
wattocyber/offensive-one-liners110 offensive-security one-liners for authorized testing and CTFs, grouped by category and kill-chain step.
horkimhab/cve-2026-64600CVE-2026-64600 - Draft - Check todo
shauryarathore357-hub/thm-moniker-link-cve-2024-21413-writeupTryHackMe room walkthrough of CVE-2024-21413, covering the Outlook Moniker Link Protected View bypass, NTLM hash leaking, and credential capture with…
