CTF

hidden-investigations/react2shell-vulnlab

A modern Next.js vulnerable web app themed as a news / blog portal for CVE-2025-55182 (React) and CVE-2025-66478 (Next.js) to learn, detect, and…

abdugafforov-bobur/cve-2026-54415-poc

PoC for CVE-2026-54415 — Azuriom CMS (<1.2.11) Broken Access Control → account takeover

jordelmir/elysium-vanguard-sentinel-audit

The official Sentinel Edition v7.11 - Hypervisor Detection & Kernel Memory Audit Suite for Honor Magic V2. Investigating CVE-2025-38352 and EL2 RKP…

ecu-10525611-xander/cve-2022-37706

All Credit to MaherAzzouzi (https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit). This is a copy of the exploit for CTFs

shirouuu/gitea-template-sync-path-traversal-privilege-escalation-cve-2026-38526-

PoC and write-up for the HackTheBox "Nexus" privilege escalation: root-run Gitea template-sync service vulnerable to path traversal via forged Git…

itsc1sco/freepbx-sqli-exploit-privilege-escalation

This walkthrough documents the complete compromise of the HTB machine Connected.

letsr00t/cve-2026-43494-pintheft-poc

Proof-of-concept for CVE-2026-43494 (PinTheft): Linux kernel local privilege escalation exploiting an RDS zerocopy reference-count bug with io_uring…

jun41ds2709/vsftpd-2.3.4-exploit

Python exploit for the vsFTPd 2.3.4 backdoor (CVE-2011-2523).

kentox493/cve-2026-42945_nginxrift

Automates CVE-2026-42945 exploitation in NGINX containers: verifies vulnerable targets, brute-forces heap offsets, executes commands, and opens an…

luiskrnr/htb_helix_cve-2023-34468

Writeup of the Hackthebox Helix machine, detailing exploitation of CVE-2023-34468 and penetration testing steps.

baptistecontreras/cve-2017-8917-joomla

CVE-2017-8917 SQL injection Vulnerability in Joomla! 3.7.0 exploit

daniyal48/ghostlock-vagrant-box

An isolated Vagrant testbed designed to simulate a complete attack chain: Initial access via the Nginx heap buffer overflow (CVE-2026-42533) followed…

ayham-megdadi/zero-day-legacy

A vulnerable Boot-to-Root CTF lab machine simulating a hospital environment. Features a realistic 17-step attack chain including SQL Injection, XSS,…

bfurkanyildiz/android-rce-analizi

Android CVE-2024-0044, 43093, 23706 zafiyet analizi ve PoC lab ortamı

volksrat71/react2shellexploitvisualized

Interactive visualization of the React2Shell (CVE-2025-55182) RCE vulnerability with narrated animations for three audiences: Expert, Practitioner,…

revyhub/cve-2026-43284---dirtyfrag-analysis-thm-

TryHackMe Dirty Frag (CVE-2026-43284) — Linux LPE writeup

nu11secur1ty/oscp

Lab materials and practice resources for OSCP certification preparation, including penetration testing exercises and hands-on security training…

rogerzeferino/cve-2019-17558-apache-solr-rce

CTF write-up documenting CVE-2019-17558 exploitation in Apache Solr, covering reconnaissance, Metasploit limitations, manual Velocity template…