#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
cronus-security/xinhu-v2.3.2信呼 v2.3.2 针对CVE-2023-1773的研究环境
nahamsec/resources-for-beginner-bug-bounty-huntersA list of resources for those interested in getting started in bug bounties
raytran54/cve-2018-7600Step-by-step analysis and exploitation lab for Drupal CVE-2018-7600 remote code execution vulnerability, including debugging, exploit code, and…
shlomirex/log4shell_labCVE-2021-44228
mclbn/docker-cve-2018-15473Dockerized environment to test pentest tools against CVE-2018-15473. Simple setup with docker-compose for vulnerability exploitation practice.
cider-security-research/cicd-goatA deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
foudadev/cve-2007-2447Educational exploit implementation for CVE-2007-2447 Samba 3.0.20-3.0.25rc username map script command execution vulnerability with Python SMB client…
inosec2/cve-2018-6574Go-based exploit for CVE-2018-6574, designed as a pentesterlab exercise to practice binary exploitation and vulnerability analysis.
yanghyperdata/logj4_pocshell_cve-2021-44228Proof-of-concept exploit for CVE-2021-44228 (Log4Shell) that automates LDAP and HTTP servers to deliver a reverse shell payload to a vulnerable Java…
hugsy/recon_2024_windbg_workshopWorkshop materials for mastering WinDbg debugging in kernel and user mode, with KdNet setup, demos, and a Time Travel Debugging challenge for binary…
joe-shenouda/awesome-cyber-skillsA curated list of hacking environments where you can train your cyber skills legally and safely
hasherezade/malware_training_vol1Materials for Windows Malware Analysis training (volume 1)
hpt-intern-task-submission/cve-2023-39361Step-by-step analysis and lab setup for CVE-2023-39361, an unauthenticated SQL injection in Cacti v1.2.24, with exploitation and mitigation…
avergnaud/next.js_exploit_cve-2024-34351Educational demo of a Server-Side Request Forgery (SSRF) vulnerability in Next.js (CVE-2024-34351), with step-by-step exploitation and mitigation…
lucaspdiniz/cve-2021-4034Local Privilege Escalation (LPE) vulnerability in Polkit - Pwnkit
cxiao/rust-reversing-workshop-recon-2024Slides and files for the Reversing Rust Binaries: One step beyond strings workshop at REcon 2024, presented on June 28, 2024.
alpereny-cs/cve-2024-4577Create lab for CVE-2024-4577
phinehasnarh/cve-2024-4577-letsdefend-walkthroughThis is an Incident Response Walkthrough: Mitigating a Zero-Day Attack (CVE-2024-4577)
