#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
biitts/cve-2026-44789-n8n-prototypepollution-rceCVE-2026-44789 — n8n <1.123.43 HTTP Request pagination prototype pollution to RCE (NODE_OPTIONS runner-spawn gadget). Lab + automated PoC, verified…
atlasvector/dirty-frag-cve-2026-43284Lab detection exercise for DirtyFrag (CVE-2026-43284) - Linux kernel privilege escalation via xfrm-ESP page cache corruption. Full write-up covering…
astrowmist/poc-cve-2016-10033Proof Of Concept for the CVE-2016-10033 (PHPMailer)
astraljays/traditionaljayIntentionally vulnerable VM-hosted Java shop — Log4Shell (CVE-2021-44228) workshop lab (EC2 / Azure VM / GCE)
anusha-khan29/cve-2025-70149-sql-injectionSecurity research project — SQL Injection vulnerability exploitation and mitigation
alexs18/cve-2021-4773Step-by-step tutorial demonstrating how to set up a vulnerable Apache 2.4.49 environment and exploit CVE-2021-41773 path traversal using Kali Linux…
alardiians/pocketbase-cve-2026-44166Lab + writeup for CVE-2026-44166: PocketBase OAuth2 account pre-hijacking via unvalidated createData.email
ahmedmansour93/event-id-268-rule-name-soc292-possible-php-injection-detected-cve-2024-4577-🚨 New Incident Report Completed! 🚨 Just wrapped up "Event ID 268: SOC292 - Possible PHP Injection Detected (CVE-2024-4577)" on LetsDefend.io. This…
ahmedmansour93/event-id-217-rule-name-soc254-apache-ofbiz-auth-bypass-and-code-injection-0day-cve-2023-51467-🚨 Just completed an incident report on Event ID 217: Apache OFBiz Auth Bypass and Code Injection 0-Day (CVE-2023-51467). This critical vulnerability…
admin2099/penetration-testing-assessment-23-04-2026Penetration testing assessment of a vulnerable IIS 6.0 WebDAV server, demonstrating reconnaissance, enumeration, exploitation (CVE-2017-7269), and…
abdibimantara/cve-2022-30190-analysis-with-letsdefends-labthis is my simple article about CVE 2022-30190 (Follina) analysis. I use the lab from Letsdefend.
aashay221999/cve-2024-49368Explorations of CVE-2024-49368 + Exploit Development
aaqilyousuf/cve-2025-7775-vulnerable-labVulnerable Dockerized web app exposing RCE, path traversal, hardcoded credentials, and insecure file uploads; an isolated lab for testing security…
4rtamis/cve-2022-23614Proof of concept for CVE-2022-23614 (command injection in Twig)
19melek19/themisfits-cve-2024-8465-sqliIntentionally vulnerable PHP web app demonstrating SQL injection authentication bypass and unauthorized data disclosure modeled after CVE-2024-8465…
0xnemian/cve-2025-13486.-cve-2025-13486Vulnerable setup for CVE-2025-13486 - Advanced Custom Fields: Extended - Remote Code Execution
ahmad.zaid/netsecdssDecision Support System for Risk Assessing Network and System Security in Small and Medium Enterprises (SMEs), A graduation project.
dinosn/cve-2026-75650-magento-validation-labDocker lab for validating the CVE-2026-75650 Magento component-level PHP execution primitive and Adobe VULN-39341 patch.
