#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
opencybersecurityalliance/kestrel-langKestrel threat hunting language: building reusable, composable, and shareable huntflows across different data sources and threat intel.
ra3edaj/lab-dfir-cve-2023-38831d
jphetphoumy/traefik-cve-2024-45410-pocA proof of concept of traefik CVE to understand the impact
disturbante/cve-2020-9484Bash POC for CVE-2020-9484 that i used in tryhackme challenge
m0d0ri205/wargame-tarpiokaYISF 2024 CTF-Web (Directory Traversal via ".tar" file, CVE-2007-4559), easy
a0xnirudh/kurukshetraKurukshetra - A framework for teaching secure coding by means of interactive problem solving.
mbrandner-group/juiceshopglIntentionally vulnerable web application for security training, CTF competitions, and testing security tools. Covers OWASP Top Ten vulnerabilities…
mahajian/cve-2019-9978Docker-based lab environment to simulate and exploit CVE-2019-9978, a remote code execution vulnerability in WordPress Social Warfare plugin versions…
fathallah17/overlayfs-cve-2021-3493Exploit a 2021 Kernel vulnerability in Ubuntu to become root almost instantly!
ahmedmansour93/event-id-217-rule-name-soc254-apache-ofbiz-auth-bypass-and-code-injection-0day-cve-2023-51467-🚨 Just completed an incident report on Event ID 217: Apache OFBiz Auth Bypass and Code Injection 0-Day (CVE-2023-51467). This critical vulnerability…
ahmedmansour93/event-id-268-rule-name-soc292-possible-php-injection-detected-cve-2024-4577-🚨 New Incident Report Completed! 🚨 Just wrapped up "Event ID 268: SOC292 - Possible PHP Injection Detected (CVE-2024-4577)" on LetsDefend.io. This…
bishopfox/local-llm-ctfA small go harness that uses Ollama to orchestrate LLMs in a restricted process flow
l8bl/cve-2024-7856Proof-of-Concept for CVE-2024-7856
cgv-dev/metasploit-module-tfmModule written in Ruby with the objective of exploiting vulnerabilities CVE-2023-2728 and CVE-2024-3177, both related to the secret mount policy in a…
bw3ll/jop_rocketThis framework enables user to discover JOP gagdets and can automate building a complete JOP chain to bypass DEP. JOP ROCKET is the ultimate solution…
juliourena/cve-2019-19470-redteamrdCVE-2019-19470 exploit replication with source code, WinDbg commands, PEB modification, and decompilation examples for educational red team training.
projectdiscovery/defcon32Defcon 32 Workshop setup and info
0xc4t/cve-2021-41773POC & Lab For CVE-2021-41773
