#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
wafeeq-fareed/log4shell-exploitation-labCVE-2021-44228 Log4Shell reproduced end to end: exploitation through remediation
fankh/vulnerability-pocCVE proof-of-concept labs, exploit scripts, and detection/prevention rules (Nginx, Apache, Snort, YARA) for high-severity CVEs. Authorized security…
hibanitt/cve-2024-38063In-depth technical analysis and proof-of-concept for CVE-2024-38063, a critical Windows IPv6 kernel RCE. Includes root-cause breakdown, Scapy-based…
webgoat/webgoatDeliberately vulnerable web application with interactive lessons and challenges for learning web application security and penetration testing…
feartheploto/gitlab-cve-2023-7028Mock vulnerable GitLab instance reproducing CVE-2023-7028 password reset hijack. Demonstrates array-based email parameter exploitation and account…
gmh5225/awesome-ai-securityA curated list of AI Security materials and resources for Pentesters, Bug Hunters, and Security Researchers.
cgrtml/reasongateExplainable security gate for LLM apps — blocks prompt injection with an auditable reason for every decision.
sunweb3sec/defihacklabsReproduce DeFi hacked incidents using Foundry.
wattocyber/oscp-notes-2026OSCP field notebook: merged technique vault and numbered notes. MIT.
qazbnm456/awesome-web-security🐶 A curated list of Web Security materials and resources.
redcanaryco/atomic-red-teamSmall and highly portable detection tests based on MITRE's ATT&CK.
ritinify/cve-2025-29927-pocProof-of-concept exploit for CVE-2025-29927, a Next.js middleware authorization bypass. Includes a vulnerable target lab and Python script to verify…
dinosn/cve-2026-32475-elementor-pro-labA/B Docker lab + PoC for CVE-2026-32475 (Elementor Pro Forms unauthenticated arbitrary file upload -> RCE via validation/move loop desync)
pnwcomputers/ultimate-cybersecurity-master-guideThis repository provides a centralized resource for operational cyber defense and offense, compiling Theory, Tools, Operating Procedures, and…
horkimhab/cve-2026-27771CVE-2026-27771 - Draft
joaovicdev/exploit-cve-2026-22778Proof-of-concept exploit for CVE-2026-22778, an unauthenticated RCE in vLLM's video processing, demonstrating heap address disclosure and a heap…
owasp/wrongsecrets-binariesSource code for the Binaries of OWASP WrongSecrets
matheusht/redthreadAn autonomous red-teaming engine for LLMs. RedThread manages the full security lifecycle: generating adversarial attacks, executing precision…
