#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
nweks/bluekeep-metasploit-lab-projectExploiting Bluekeep (CVE-2019-0708) on windows 7 using metasploit (Esucational lab)
laliea/cve-2021-46398A Proof of Concept for the CVE-2021-46398 flaw exploitation
xsxtw/cve-2019-0232Step-by-step lab environment for exploiting CVE-2019-0232, a Tomcat CGI command injection vulnerability, with setup instructions and payload examples.
cved-sources/cve-2018-3811Docker container providing a vulnerable environment for CVE-2018-3811, designed for security testing and exploit practice within the Cved vulnerable…
pizz33/spring-cloud-function-spelReproduction environment and proof-of-concept for Spring Cloud Function SpEL injection leading to remote code execution, with a runnable Java 11 demo…
huskyhacks/pmat-labsLabs for Practical Malware Analysis & Triage
veraxy00/cve-2020-8840Jackson-databind远程代码执行漏洞（CVE-2020-8840）分析复现环境代码
dinosn/cve-2024-21182Reproducible Docker lab for CVE-2024-21182 Oracle WebLogic T3/IIOP OpaqueReference JNDI injection leading to unauthenticated RCE. One-command…
kkaanozturk/hyperos-directory-traversal-analysisXiaomi HyperOS AVCodec Medya Framework'ündeki Use-After-Free (CVE-2025-21082) Zafiyetinin Derinlemesine Analizi, Rust Simülasyonu ve İnteraktif Web…
hirokiii/cve-2023-44487Educational environment for LTAT.04.022 Homework 4.
lucastran05/cve-2023-48223Proof-of-concept demonstrating JWT algorithm confusion in fast-jwt library. Includes vulnerable server, token forging script, and verification fix…
xxdndxx/ctf-trackerOffline-first dashboard for tracking CTF machines and labs, with attack lifecycle management, dynamic reverse shell builder, and embedded writeup…
trimstray/the-book-of-secret-knowledgeA collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
wrongbaud/hackaday-uCourse materials for hackaday.io Ghidra training
adeyosemanputra/pygoatintentionally vuln web Application Security in django
ramadhanamizudin/lazywebLazyWeb is a demonstration web application designed to showcase common server-side application vulnerabilities. Each vulnerability is categorized…
eshard/scaredPython framework for performing side-channel analysis attacks (e.g., CPA) on public datasets, designed for educational use and hands-on practice in…
x-cotang/cve-2025-55183_pocCVE-2025-55183 POC
