#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
pvharmo2/gha-lab-677752506eAuthorized security-research lab reproducing CVE-2026-42298 (pull_request_target docker-build RCE in pr-docker-build.yml) — flattened snapshot of…
feartheploto/gitlab-cve-2023-7028Mock vulnerable GitLab instance reproducing CVE-2023-7028 password reset hijack. Demonstrates array-based email parameter exploitation and account…
hibanitt/cve-2024-38063In-depth technical analysis and proof-of-concept for CVE-2024-38063, a critical Windows IPv6 kernel RCE. Includes root-cause breakdown, Scapy-based…
wafeeq-fareed/log4shell-exploitation-labCVE-2021-44228 Log4Shell reproduced end to end: exploitation through remediation
ritinify/cve-2025-29927-pocProof-of-concept exploit for CVE-2025-29927, a Next.js middleware authorization bypass. Includes a vulnerable target lab and Python script to verify…
dinosn/cve-2026-32475-elementor-pro-labA/B Docker lab + PoC for CVE-2026-32475 (Elementor Pro Forms unauthenticated arbitrary file upload -> RCE via validation/move loop desync)
joaovicdev/exploit-cve-2026-22778Proof-of-concept exploit for CVE-2026-22778, an unauthenticated RCE in vLLM's video processing, demonstrating heap address disclosure and a heap…
pvharmo2/gha-lab-6c3094af9eAuthorized security-research lab reproducing CVE-2026-27941 (pwn request in pull_request_target workflows) — snapshot of openlit/openlit
fortbridge-uk/cve-2026-75604Reproduction lab and exploit tooling for CVE-2026-75604, a path traversal in Next.js incremental cache leading to unauthenticated RCE on Windows.…
horkimhab/cve-2026-52810Educational repository for learning and researching CVE-2026-52810 in controlled environments, with setup instructions and links to related PoC…
franklinf25/cve-2026-31431Analyzes CVE-2026-31431, a Linux kernel AF_ALG AEAD vulnerability, providing a safe detector, in-lab LPE exploit, and QEMU-based A/B kernel lab for…
wayang1337/cve-2026-11613Divi Ajax Filter <= 5.1.2 Unauthenticated Local File Inclusion via 'custom_loop_template'
pvharmo2/gha-lab-b5c1313658Authorized security-research lab reproducing CVE-2026-1699 (pwn request in preview.yml) — snapshot of eclipse-theia/theia-website
db-ol/cuaharmBenchmark for evaluating safety risks of computer-using agents, with 104 realistic misuse scenarios across seven malicious categories, supporting…
anekazek/cve-2026-47627Proof-of-concept exploit for CVE-2026-47627, a path traversal vulnerability in NVIDIA Triton Inference Server leading to arbitrary file write via…
horkimhab/cve-2026-19949Educational repository providing proof-of-concept for CVE-2026-19949, intended for authorized security research and testing in isolated environments.
ai45lab/skill-safety-benchBenchmark for evaluating AI agent safety against attacks embedded in skill-facing context, with 155 cases across 6 risk domains, measuring task…
j3ssie/dynast-benchA DAST benchmark of intentionally-vulnerable apps with ground-truth answer keys for scoring scanners
