#1Capture The Flag platforms, challenge creation, solving tools, and competitive cybersecurity frameworks.
Kitploit recommended
lavanya2085/solar-exploiting-log4jThis repository provides a detailed walkthrough of the *Solar Exploiting Log4j room* on TryHackMe, focusing on exploiting the critical Log4Shell…
yucaerin/cve-2026-8181The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Authentication Bypass
materaj2/mintinstall-object-injectionCVE-2019-17080
0xdtc/crushftp-auth-bypass-cve-2025-31161Exploit for CrushFTP CVE-2025-31161 auth bypass: detects vulnerable targets, enumerates users, and creates unauthorized admin accounts through…
vulnerk0/cve-2023-46818Python PoC for CVE-2023-46818
pannagkumaar/pentest-labModern cyber range with 50 hands-on challenges across web, API, cloud, AI, and blue-team security tracks. Features guided attack chains, transparent…
twappz/htb-silentium-writeupHack The Box - Silentium machine writeup | CVE-2025-58434, CVE-2025-59528, CVE-2025-8110
rootsecnz/htb-ctf-walkthroughsWalkthroughs for Capture the Flag challenges on the HTB Cybersecurity Platform.
eyodav/cve-2025-34157A stored XSS in the project delete flow allows execution of attacker-controlled JavaScript in an administrator’s browser when the admin attempts to…
ldb33/cve-2023-24249-pocProof-of-concept exploit for CVE-2023-24249, an arbitrary file upload vulnerability in laravel-admin, enabling web shell deployment for penetration…
stellardriftlabs/cve-2018-8097-pocPOC for CVE-2018-8097 This script exploits CVE-2018-8097 and can retrieve files and contents using a blind RCE method.
gmh5225/blackash-cve-2025-4322CVE-2025-4322 – Unauthenticated Privilege Escalation via Password Update "Account Takeover" 🔥
macaroniwdcheese/cve-2025-55182-labLocal lab for understanding CVE-2025-55182 RCE in React Server Components/Next.js. Includes a deliberately vulnerable app and optional scanner helper…
deepankarkumar1/cve-2025-55182_vulnerable-applicationIntentionally vulnerable React Server Components lab for studying CVE-2025-55182. Provides a safe environment for security researchers, developers,…
maikneysm/autopwn-titanic.htbThis is an automated exploitation script for the Hack The Box machine *Titanic*. It extracts Gitea user hashes via LFI, assists in cracking them, and…
useru1k/php-8.1.0-dev-exploitExploit for the PHP 8.1.0-dev backdoor vulnerability (CVE-2021-21707)
fevar54/cve-2025-4679-secureoauth-demo---enfoque-educativoIsolated educational lab simulating CVE-2025-4679 OAuth credential exposure. Learn offensive and defensive security through hands-on exercises,…
pruthuraut/cve-2025-46173poc for the CVE-2025-46173
