#1Capture The Flag platforms, challenge creation, solving tools, and competitive cybersecurity frameworks.
Kitploit recommended
jithinodattu/cve-2007-4559-labSelf-contained Docker lab demonstrating CVE-2007-4559 (TarSlip) directory traversal via Python's tarfile module. Includes vulnerable and fixed APIs,…
alexandre-briongos-wavestone/react-cve-2025-55182-labDockerized lab demonstrating CVE-2025-55182, a React Server Components vulnerability, with a proof-of-concept exploit for security research and…
m0d0ri205/wargame_re-lsCTF challenge exploiting CVE-2025-0184 DOCX SSRF vulnerability to access internal admin service and retrieve a flag. Includes exploit generator and…
trerb/markdown-exfil-testerBlack-box test whether an LLM chatbot is vulnerable to markdown/HTML exfil (CVE-2025-32711 class). Spins up a sink, sends payloads, renders in…
si-ni/cve-2025-29927-proof-of-conceptCapture the Flag challenge: CVE-2025-29927 in combination with a command injection vulnerability
v0idw1re/htb-pterodactyl-writeupHackTheBox — Pterodactyl (Medium/Linux) walkthrough. CVE-2025-49132 LFI → pearcmd RCE → bcrypt crack → SSH. Privesc via CVE-2025-6018 (PAM…
acseguin21/trust-boundary-ctfBrowser-based MCP CTF — OAuth token confusion and session isolation failure (CVE-2025-49596 pattern). DevTools only.
jithinodattu/cve-2023-24329-labSelf-contained Docker lab demonstrating CVE-2023-24329, a Python urllib parser differential that bypasses URL scheme and host filters, with…
aperikube/pwn-arm-nfcARM buffer overflow challenge exploiting NFC tag input on Raspberry Pi. Includes hardware assembly guide, server code, and flag retrieval for CTF and…
thieveshkar/rootquest-ctf-box-multi-stage-exploitation-vmCustom vulnerable VM (Ubuntu 14.04) designed for teaching multi-stage penetration testing. Features 10 interconnected challenges across Forensics,…
qduarte-42/rainfallIntroduction to the exploitation of ELF binaries.
zbyszkok/cve-2025-49844-redishell-ai-made-revshellUntested completition of the Redishell PoC made by AI
salimelh94/web-penetration-testExploiting WordPress vulnerabilities (CVE-2025-34077), authentication bypass via cookie injection, and privilege escalation to root. Part of my…
pedro-lucas-melo/estudo-de-caso-cve-2024-21413Um estudo de caso do CVE-2024-21413. Usado como parâmetro a sala do TryHackMe Moniker Link (CVE-2024-21413). Feito edições com claude code no exploit.
androidteacher/react-cve-2025-55182-labLab with PoC
qduarte-42/snow-crashIntroduction to cybersecurity.
karimelsheikh1/htb-facts-writeupHackTheBox Facts machine writeup — CVE-2025-2304, MinIO S3 enumeration, SSH key cracking, and facter privilege escalation.
