#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
tnot123/cve-2017-9822In-depth technical analysis and proof-of-concept for CVE-2017-9822, an insecure deserialization vulnerability in DotNetNuke leading to remote code…
threatradarai/trai-001-critical-rce-vulnerability-in-apache-parquet-cve-2025-30065-simulationA CVSS 10.0-rated vulnerability in the parquet-avro Java module allows remote code execution via unsafe deserialization when parsing schemas. Tracked…
thirukrishnan/cve-2023-50164-apache-struts-rceDockerized vulnerable Apache Struts application for testing CVE-2023-50164 remote code execution, with build and run instructions for security…
thestingr/reactoops-writeupHack The Box Writeup for Retired Challenge ReactOOPS - Complete solution and educational guide to CVE-2025-55182/CVE-2025-66478 (React2Shell RCE).…
thecyberfairy/cve-lfi-labA hands on lab investigating CVE-2025-39507 from a Tier 1 SOC analyst perspective. Includes log review in Microsoft Sentinel, IP analysis, real world…
tempuss/ctf_cve-2020-7471CTF challenge exploiting CVE-2020-7471, a Django SQL injection vulnerability in PostgreSQL StringAgg, with Docker setup and exploit scripts.
teodor1231241/demo-proof-of-concept-temporal-memory-inconsistency-in-cldflt.sys-cve-2025-62221Proof-of-concept demonstrating a use-after-free in cldflt.sys (CVE-2025-62221) that enables local privilege escalation to SYSTEM via kernel pool…
techieneurons/cve-2024-3116_rce_in_pgadmin_8.4Making a lab and testing the CVE-2024-3116, a Remote Code Execution in pgadmin <=8.4
tarekhshaikh13/cve-2025-55184Target Code + Exploit
t1erno/cve-2022-0492-docker-breakout-checker-and-pocDocker Breakout Checker and PoC via CAP_SYS_ADMIN and via user namespaces (CVE-2022-0492)
squirre17/hbp-attack-demoLinux kernel hbp exploit method demo. (i.e. the degradation version of CVE-2022-42703)
sugib3o/vulnerable-nextjs-14-cve-2025-29927vulnerable-nextjs-14-CVE-2025-29927
stealthmoud/react-server-cve-labSecurity research lab for CVE-2025-55183 and CVE-2025-55184 in React Server Components
spydomain/cve-2023-22809-automated-python-exploitsAutomates vulnerability check for sudo versions and privilege escalation via sudoedit if exploitable, helping users test and gain root access.
spengesec/cve-2019-19699Centreon =<19.10 Authenticated RCE
somchandra17/cve-2024-46507build-script for CVE-2024-46507 and CVE-2024-46508
slow-mist/cve-2025-4126smart contract reentrancy attack vulnerability POC
sk3pper/cve-2024-21626-old-docker-versionsAnalyzes and exploits a container escape vulnerability in legacy Docker/runc versions, demonstrating fd leakage to access the host filesystem, with…
