#1Capture The Flag platforms, challenge creation, solving tools, and competitive cybersecurity frameworks.
Kitploit recommended
keymandll/cve-2022-29622Hack this service to prove CVE-2022–29622 is valid
shivammittal2403/cve-2026-59827-metabase-cyber-rangeEducational cyber range for CVE-2026-59827 (Metabase H2 unsafe deserialization / CWE-502). Isolated Docker lab — training only, not for attacking…
franklincg/secdim-assurance-drift-challengeSecDim Challenge Builder repro inspired by CVE-2026-88861: AAL1 MFA bypass at privileged credential boundary
horkimhab/cve-2026-76461Educational security research repository for learning, testing, and researching CVE vulnerabilities and defensive practices in isolated lab…
nanashibx2/bx2-writeupsCybersecurity writeups, walkthroughs, and technical notes by Nanashi Bx2.
dua2z3rr/cve-2026-29000-pocCVE-2026-29000 - pac4j-jwt (< 4.5.9 / < 5.7.9 / < 6.3.3) JwtAuthenticator authentication bypass PoC
secnotes/cve-2024-32258Proof-of-concept exploit for CVE-2024-32258, a path traversal vulnerability in FCEUX NetPlay 2.7.0 enabling unauthenticated remote arbitrary file…
9carlo6/cve-2024-23346This repository contains a Crystallographic Information File (CIF) intended for use on the "Chemistry" machine on Hack The Box (HTB).
julianertle/cve-2023-0386-ctfCapture The Flag challenge exploiting CVE-2023-0386, a Linux kernel privilege escalation vulnerability in OverlayFS. Designed for hands-on binary…
stealthbyte0/cve-2025-4517-pocCVE-2025-4517 (CVSS 9.4 – Critical) A vulnerability in Python's `tarfile`
0xtensho/cve-2025-49132-pocProof-of-concept exploit for CVE-2025-49132, abusing a file inclusion vulnerability in Pterodactyl to achieve remote code execution via pearcmd.php.
verylazytech/cve-2025-64446CVE-2025-64446 - A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0…
disnaming/cve-2022-34169A PoC for CVE-2022-34169, for the SU_PWN challenge from SUCTF 2025
s3v3n-jg/cve-2026-76461Intentionally vulnerable Python lab demonstrating unsafe YAML deserialization leading to code execution, with three difficulty levels, exploit…
3jee/copy-fail-goGo port of the CVE-2026-31431 (copy-fail) Linux kernel privilege escalation PoC, with automatic SUID binary enumeration and interactive target…
elf1337/blind-xxe-controller-cve-2021-29447Arbitrary file read controller based on CVE-2021-29447
lr-m/icseeuThis is a suite of tools/PoCs/exploits for cameras using the iCSee application. And yes - it can run NES games!
jwsly12/cve-2025-58434-59528-htb-ctfExploitation Silentium HTB-CTF
