#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
lxxexxbxx/cve-2026-33017PoC exploit for an unauthenticated RCE in Langflow <=1.8.1, including source-level root cause analysis, AST-aware reverse shell payload, Docker lab,…
owasp/owasp-open-source-intelligence-standardAn open, vendor-neutral verification standard for traceable, reviewable, and rights-aware open-source intelligence. Current release: OOVS v0.1.0.
joaovicdev/exploit-cve-2026-56121Proof-of-concept exploit for CVE-2026-56121, an unauthenticated RCE in Feast's registry gRPC server via unsafe dill deserialization. Includes a…
0x0allenace/soc-analyst-portfolioA curated portfolio showcasing my SOC investigations, threat hunting projects, DFIR labs, detection engineering, technical blogs, and cybersecurity…
rawsec/rawsec-cybersecurity-listCurated inventory of cybersecurity tools and resources covering penetration testing, forensics, OSINT, web security, malware analysis, cryptography,…
vaibhav91one/shellshock-cve-labIntentionally vulnerable CGI lab for Shellshock (CVE-2014-6271) with a Python RFC-3875 server and GNU bash 4.2, designed for isolated security…
vaibhav91one/log4shell-cve-labIntentionally vulnerable Log4j 2.14.1 HTTP service for hands-on practice with CVE-2021-44228 (Log4Shell) in an isolated sandbox environment.
vaibhav91one/drupalgeddon2-cve-labIntentionally vulnerable Drupal 7.57 lab for reproducing CVE-2018-7600 (Drupalgeddon2) in a Docker container, with an installer script and PHP…
dinosn/givewp-cve-2026-82222-rce-labAuthorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix.
lets-all-be-stupid-forever/circuit-artistCircuit Artist is a digital circuit drawing and simulation game.
joaovicdev/exploit-cve-2026-9198Proof-of-concept exploit for CVE-2026-9198, an unauthenticated RCE in IBM Langflow OSS, chaining auto_login and validate/code endpoints. Includes a…
gregdurys/specterops-k8s-red-teamers-libvirt-patchUnofficial libvirt patch for the free SpecterOps Kubernetes for Red Teamers lab
morzelowski/cve-2026-12243-nltk-pocDocker lab demonstrating CVE-2026-12243 path traversal in NLTK before 3.10.0, contrasting vulnerable and patched behavior with a synthetic secret in…
dinosn/cve-2026-23989-opencloud-labReproduction lab (A/B Docker) for CVE-2026-23989 — OpenCloud / ownCloud Infinite Scale public-link scope-validation bypass in Reva
yora1928/papercut-cve-2026-81578-82078Security research tool for PaperCut CVE-2026-81578 & CVE-2026-82078
v33ru/awesome-connected-things-secA Curated list of Security Resources for all connected things
rawfilejson/awesome-osint-arsenalOSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.
