#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
albisorua/poc-cve-2019-10743Proof-of-concept exploit demonstrating the Zip Slip vulnerability (CVE-2019-10743) in mholt/archiver, with a vulnerable server and Python payload for…
ahmedshamsddin/cve-2025-55182Python exploit for CVE-2025-55182 in React Server Components, injecting a shell into Next.js 16.0.6 applications. Includes a vulnerable app for…
acseguin21/trust-boundary-ctfBrowser-based MCP CTF — OAuth token confusion and session isolation failure (CVE-2025-49596 pattern). DevTools only.
abiyeenzo/cve-2025-8671PoC éducatif pour la vulnérabilité CVE-2025-8671 (DoS HTTP/2 sur lighttpd). À utiliser uniquement en laboratoire local.
zanex360/cdt-vulnsamba-deployCDT Ansible playbook for deploying CVE-2017-7494 aka "SambaCry" to an Ubuntu box
z3yr0xx/cve-2025-64459CTF challenge demonstrating Django ORM filter injection (CVE-2025-64459) with auth bypass and product filter bypass exploits, including deployment…
yanghyperdata/logj4_pocshell_cve-2021-44228Proof-of-concept exploit for CVE-2021-44228 (Log4Shell) that automates LDAP and HTTP servers to deliver a reverse shell payload to a vulnerable Java…
villaquiranm/5mmissi-cve-2017-1000499Proof-of-concept exploit for CVE-2017-1000499, a CSRF vulnerability in phpMyAdmin, demonstrating harmful database operations via crafted URLs.
trankubao/cve-2023-3460_fixCái này dựng lên với mục đích cho ae tham khảo, chê thì đừng có xem. :))))
tlevente20/http-2-rapidreset-cve-2023-44487-testlabDocker lab for reproducing and studying CVE-2023-44487 (HTTP/2 Rapid Reset) for thesis research, providing a controlled environment for vulnerability…
shubhankargupta691/cve-2024-42009Nuclei templates and Docker lab to demonstrate and validate CVE-2024-42009, a reflected XSS in Roundcube Webmail, using Out-of-Band detection via…
sanderschepers1993/cybersec2026Educational lab environment for exploiting CVE-2022-22947 in Spring Cloud Gateway, with automated victim VM setup and attacker configuration scripts.
samuel-g3/escalamiento-de-privilegios-usando-el-kernel-exploit-dirty-cowExploit para escalada de privilegios en Linux basado en la vulnerabilidad Dirty Cow (CVE-2016-5195). Incluye binario, código fuente e instrucciones…
sallocinavalcante/lab-smb-responder-cve-2024-21413Laboratorio criado para PenTest da Vuln CVE 2024-214113(MONIKER LINK).
sfn233/cve-2025-41243-vulnerability-labSpring Cloud Gateway SpEL RCE Vulnerability Environment
ckrielle/cve-2019-16784-pocA Proof of Concept exploit for the PyInstaller CVE-2019-16783
cedric-martz/ethernalblue_reportThis is a security assessment report regarding the EthernalBlue vulnerability (CVE-2017-0143).
biitts/cve-2026-49468-litellm-auth-bypassCVE-2026-49468 — LiteLLM (<1.84.0) unauthenticated auth bypass via Host-header route confusion. PoC + docker lab.
