#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
ankitpandey383/cve-2025-32463-sudo-privilege-escalationPractical security research project exploiting CVE-2025-32463 to gain root access on a vulnerable sudo version. Includes write-up, PoC, and…
aninfosec/cve-2025-1094It is an input sanitization flaw caused by an encoding mismatch, allowing crafted input to bypass filters. If a server is vulnerable, an attacker can…
aminetitrofine/cve-2022-4096This experiment is destinated to demonstrate how the DNS rebinding attack works on an emulated IoT. In the setup, we have a simulated IoT device,…
amalpvatayam67/day10-nextjs-middleware-labNext.js middleware auth-bypass lab (CVE-2025-29927 simulation)
amalpvatayam67/day09-bentoml-deser-labay 09 — CVE-2025-27520 (BentoML-style insecure deserialization) — Local Docker lab
amalpvatayam67/day08-cisco-fmc-simThis is a minimal, educational simulation that demonstrates the _impact_ class of a management-plane parsing RCE (inspired by CVE-2025-20265). It…
amalpvatayam67/day06-foxcms-rceThis tiny lab simulates the core idea behind CVE-2025-29306: unsafe use of `unserialize()` on attacker-controlled input leading to remote code…
amalpvatayam67/day05-grafana-sqlexpr-labGrafana SQL Expressions → DuckDB LFI (CVE-2024-9264)
amalpvatayam67/day04-nexus-4956Nexus Repository 3 Path Traversal (CVE-2024-4956)
amalpvatayam67/day01-sessionreaper-labThis is a tiny lab that simulates the core idea reported for CVE-2025-54236 (“SessionReaper”)
alsaut1/react2shell-labCVE-2025-55182 React2Shell PoC lab
alpacamybags118/log4j-cve-2021-44228-sampleSample docker-compose setup to show how this exploit works
alexandre-briongos-wavestone/react-cve-2025-55182-labDockerized lab demonstrating CVE-2025-55182, a React Server Components vulnerability, with a proof-of-concept exploit for security research and…
alexan011/cve-2024-47167-environment-setupSets up a Dockerized environment to reproduce and analyze CVE-2024-47167, a vulnerability in Gradio 4.40.0, with an internal HTTP server and…
alej6/masscybercenter-mentorship-project-Exploiting CVE-2023-2825 on a VM
albisorua/poc-cve-2019-10743Proof-of-concept exploit demonstrating the Zip Slip vulnerability (CVE-2019-10743) in mholt/archiver, with a vulnerable server and Python payload for…
alastair66/cve-2025-29927Next.js Middleware Bypass Vulnerability
alanbarret/cve-2019-18935Nuclei template and validation scripts for detecting CVE-2019-18935, a critical .NET deserialization RCE in Telerik UI for ASP.NET AJAX, with…
