#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
renewablehacking/cve-2026-45321-tanstackEducational lab simulating npm supply chain attacks, CI/CD abuse, and install-time code execution via CVE-2026-45321. Hands-on defensive security…
recanavar/vuln_spring_log4j2Simple Vulnerable Spring Boot Application to Test the CVE-2021-44228
rainhawk13/added-pentest-ground-to-vulnerable-websites-for-trainingCVE-2017-0089 Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP…
rahmadsandy/exim-4.87-cve-2019-10149Educational lab environment for practicing exploitation of CVE-2019-10149 in Exim 4.87, designed for hands-on vulnerability analysis and penetration…
r4j3sh-com/cve-2025-68613-n8n-labAnalysis of CVE-2025-68613
quantumworld-dpdns-io/cve-2026-42945Full CVE-2026-42945 research repository with heap buffer overflow analysis, RCE exploit (heap spray + Feng Shui), detection scripts, and patching…
pssec-io/cve-2026-41179POC for CVE-2026-41179
pravin-pp/log4j2-cve-2021-45105Sample Spring Boot web application vulnerable to Log4j2 CVE-2021-45105 with documented exploitation steps and mitigation guidance for security…
pravin-pp/log4j2-cve-2021-45046Sample Spring Boot web application vulnerable to Log4j2 CVE-2021-45046, demonstrating JNDI injection and infinite loop exploitation for educational…
pavanaa4k/cve-2023-46604-labDetection, Exploit and Mitigation for CVE 2023 46604.
oscerd/cve-2026-40048Reproducer for CVE-2026-40048: Apache Camel camel-pqc FileBasedKeyLifecycleManager unsafe deserialization (RCE)
nulltrace1336/cve-2025-55182-metasploit-exploit-skeleton-real-flow-Quyida to‘liq LAB rejasi: demo-vulnerable app → Python PoC → Metasploit exploit skeleton
nikolas-charalambidis/cve-2021-44228A simple simulation of the infamous CVE-2021-44228 issue.
nicolasjulian/bouncer-overflowWorking POC of CVE-2026-6664 written by Sonnet 4.6
netw0rk7/cve-2019-9193-home-labThis lab simulates CVE-2019-9193 - PostgreSQL COPY FROM PROGRAM RCE
netw0rk7/cve-2015-3306-home-labCVE-2015-3306 - ProFTPD - RCE Home Lab setup (Docker) easy to use for Red Teaming or Penetration Testing
mythicaltree/cve-2019-2215Proof-of-concept exploit for CVE-2019-2215 (Bad Binder) targeting Android 10 x86_64 emulator. Designed for isolated kernel exploitation research and…
mishaqdev/cve-2010-2075-analysisTechnical writeup and penetration testing report for CVE-2010-2075, demonstrating UnrealIRCd backdoor exploitation and remediation.
