#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
androidteacher/cve-2026-24061-poc-telnetdProof-of-concept exploit for CVE-2026-24061, an unauthenticated remote root privilege escalation in inetutils-telnetd via USER environment variable…
amusedx/cve-2026-22686CTF challenge focused on sandbox escape via source code review of a JavaScript execution environment, designed for hands-on vulnerability analysis…
abhayclasher/cve-2026-39866Proof-of-concept lab demonstrating command injection in GitHub Actions workflow dispatch (CVE-2026-39866). Runs vulnerable and patched versions…
mehdi-ben-hamou/cve-2026-30498Educational CSRF vulnerability demonstration with a controlled lab environment, including a proof-of-concept exploit and a fixed version with proper…
sanr01/cve-2021-41773-exploit-labCVE-2021-41773 Exploit Lab
s-amnajafri/cve-2021-41773-apache-labDocker-based lab for reproducing CVE-2021-41773 (Apache HTTP Server 2.4.49) through controlled path traversal and file disclosure using a custom…
nullwhisper/cve-2026-14840Proof-of-concept exploit for a WordPress plugin vote-limit bypass using spoofed X-Forwarded-For headers; ships a Docker lab to validate…
horkimhab/cve-2026-50656Educational lab and proof-of-concept materials for a specific CVE, providing sandboxed scripts and templates for vulnerability research, authorized…
mhaggis/security-detections-mcpMCP to help Defenders Detection Engineer Harder and Smarter
claroty/aryaGenerates pseudo-malicious files from YARA rules to trigger AV/EDR detection, enabling malware research, rule QA, and network sensor pressure testing…
bishopfox/json-interop-vuln-labsCompanion labs to "An Exploration of JSON Interoperability Vulnerabilities"
xbufu/adlabCustom PowerShell module to setup an Active Directory lab environment to practice penetration testing.
a0xnirudh/kurukshetraKurukshetra - A framework for teaching secure coding by means of interactive problem solving.
bw3ll/jop_rocketThis framework enables user to discover JOP gagdets and can automate building a complete JOP chain to bypass DEP. JOP ROCKET is the ultimate solution…
convisolabs/cve-2021-22204-exiftoolPython exploit for the CVE-2021-22204 vulnerability in Exiftool
mainframed/dc30_workshopDEFCON 30 Mainframe buffer overlow workshop container
payatu/cve-2015-6086PoC for CVE-2015-6086
