#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
cd6629/cve-2015-3306-python-pocConverted with tweaks from a metasploit module as an exercise for OSCP studying and exploit development
cberman/cve-2023-2822-demoSimple flask application to implement an intentionally vulnerable web app to demo CVE-2023-2822.
c3r34lk1ll3r/cve-2017-5123PoC CVE-2017-5123 - LPE - Bypassing SMEP/SMAP. No KASLR
brianwrf/magento-cve-2016-4010Magento Unauthorized Remote Code Execution (CVE-2016-4010)
brahmiboudjema/cve-2020-25637-libvirt-double-freeDouble Free
bossnick98/-soc342---cve-2025-53770-sharepoint-toolshell-auth-bypass-and-rceAn activity to train analysis skills and reporting
bit4woo/cve-2020-13925Proof-of-concept exploit for CVE-2020-13925, a command injection vulnerability in Apache Kylin's diagnostic API, allowing remote code execution via…
beraphin/cve-2018-6789Exploit for CVE-2018-6789, a heap buffer overflow in Exim's base64 decoding, achieving remote code execution via chunk overlap and ACL string…
benguelmas/cve-2017-0143Educational demonstration of exploiting CVE-2017-0143 (EternalBlue) on Windows 7 using Metasploit in a controlled lab environment for penetration…
battleofthebots/dejavuChallenge based on CVE-2021-22204 where users send a malicious file to a web application to gain RCE
bananoname/cve-2021-42013Python script to detect and exploit path traversal and remote code execution in Apache 2.4.50 (CVE-2021-42013), with bulk scanning and a Docker lab…
baldassarrefe/fep3370-advanced-ethical-hackingDHCP exploitation with DynoRoot (CVE-2018-1111)
baktistr/cve-2025-59532-pocA Docker-based research environment for analyzing CVE-2025-59532, a path traversal vulnerability in OpenAI Codex CLI that allows arbitrary file write…
badsectorlabs/ludus_xz_backdoorAn Ansible Role that installs the xz backdoor (CVE-2024-3094) on a Debian host and optionally installs the xzbot tool.
bl34chig0/telstra-cybersecurity-virtual-experience-A simple python script for a firewall rule that blocks incoming requests based on the Spring4Shell (CVE-2022-22965) vulnerability
b4ny4n/cve-2020-13151POC for CVE-2020-13151
b1tm0n3r/cve-2021-44228CVE-2021-44228 demo webapp
b0ysie7e/cve-2025-3248-pocRust-based proof-of-concept exploit for CVE-2025-3248, a critical unauthenticated RCE in Langflow via /api/v1/validate/code, allowing arbitrary…
