#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
diegslva/cve-2015-3306-labReproducible Docker lab + raw-socket exploit for CVE-2015-3306 (ProFTPD mod_copy pre-auth arbitrary file copy) — a patch-diffing learning exercise
digininja/dvwaIntentionally vulnerable PHP/MariaDB web application for practicing common web security vulnerabilities across multiple difficulty levels in a legal,…
horkimhab/cve-2026-86218Proof-of-concept for CVE-2026-86218, a pre-auth remote code execution in N-central, intended for authorized security testing and educational research…
jailbreakdotparty/dirtyzeroSimple customization toolbox, utilizing CVE-2025-24203. Supports iOS 16.0 - iOS 18.3.2.
pvharmo2/gha-lab-5511dc3f73Authorized security-research lab reproducing CVE-2026-45131 (pwn request in .github/workflows/pull-request.yaml) — snapshot of…
ksnnd32/redis_exploit🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.
xxdndxx/ctf-trackerOffline-first dashboard for tracking CTF machines and labs, with attack lifecycle management, dynamic reverse shell builder, and embedded writeup…
pvharmo2/gha-lab-677752506eAuthorized security-research lab reproducing CVE-2026-42298 (pull_request_target docker-build RCE in pr-docker-build.yml) — flattened snapshot of…
joaovicdev/exploit-cve-2026-42559Docker lab + Python PoC for CVE-2026-42559 - DNS rebinding via unvalidated Host header in the rmcp (Rust MCP SDK) Streamable HTTP server transport
joaovicdev/cve-2026-42559Docker lab and Python proof-of-concept demonstrating DNS rebinding via unvalidated Host header in rmcp Streamable HTTP server transport…
joaovicdev/exploit-cve-2024-7804Docker lab + Python exploit for CVE-2024-7804 (PyTorch torch.distributed.rpc unsafe pickle deserialization RCE, CWE-502, torch <= 2.3.1)
joaovicdev/cve-2024-7804Self-contained Docker lab and Python exploit demonstrating CVE-2024-7804, a critical RCE in PyTorch's distributed RPC via unsafe pickle…
the-art-of-hacking/h4ckerCurated collection of cybersecurity resources, labs, and training materials covering ethical hacking, penetration testing, exploit development,…
isaca0315/cve-2026-64849-poc-labeste laboratorio puede estar bien o mal preguntale a la IA estoy probando pero debe funcionar hahahah
isaca0315/cve-2026-44578-next-js-ssrfeste laboratorio puede estar bien o mal esta el pruebas pero debe funcionar preguntale a la IA hahah
athena-os/athenaAthena OS is a Arch/Nix-based distro focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!
wafeeq-fareed/log4shell-exploitation-labCVE-2021-44228 Log4Shell reproduced end to end: exploitation through remediation
