#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
phinehasnarh/cve-2024-4577-letsdefend-walkthroughThis is an Incident Response Walkthrough: Mitigating a Zero-Day Attack (CVE-2024-4577)
binaryninja/cve-2024-23334Expolit for CVE-2024-23334 (aiohttp >= 1.0.5> && <=3.9.1)
hpt-intern-task-submission/cve-2022-46169Step-by-step analysis of CVE-2022-46169: unauthenticated remote code execution in Cacti via authentication bypass and command injection, with Docker…
tadash10/exploiting-cve-2021-44228-log4shell-in-a-banking-environmentObjective: Demonstrate the exploitation of the Log4Shell vulnerability (CVE-2021-44228) within a simulated banking application environment.
lkarlslund/deploy-goadScript to install prerequisites for deploying GOAD on Ubuntu Linux 22.04
astrowmist/poc-cve-2016-10033Proof Of Concept for the CVE-2016-10033 (PHPMailer)
controlplaneio/simulatorKubernetes Security Training Platform - focusing on security mitigation
jakob-pennington/cve-2024-32002-poc-awA POC for CVE-2024-32002 demonstrating arbitrary write into the .git directory.
meirelez/ssr-dnssecIn this repository you can find the files used to try to produce a POC for the CVE-2023-50387
kirkdjohnson/wiresharkDownloaded a packet capture (.pcapng) file from malware-traffic-analysis.net which was an example of an attempted attack against a webserver using…
wechicken456/cve-2021-4034-ctf-writeupCTF pwn challenge writeup exploiting CVE-2021-4034 (pkexec) via heap manipulation, with Ghidra-based reverse engineering and a custom shelly.so…
bc-security/beginners-guide-to-obfuscationHands-on red-team obfuscation workshop teaching AMSI bypass, ETW evasion, and payload obfuscation with PowerShell, Visual Basic, and C# to evade…
dcheng69/cve-2022-0185-case-studyEducational case study and exploit development walkthrough for CVE-2022-0185, a Linux kernel heap-based buffer overflow enabling local privilege…
xsxtw/cve-2019-0232Step-by-step lab environment for exploiting CVE-2019-0232, a Tomcat CGI command injection vulnerability, with setup instructions and payload examples.
jolynngsc/efs_cve-2021-43217Educational lab demonstrating EFS bypass (CVE-2021-43217) on Windows 10 using Kali Linux, Metasploit, and custom Python shellcode for penetration…
brian-edgar-re/poc-cve-2024-23334This repository contains a proof of concept about the exploitation of the aiohttp library for the reported vulnerability CVE-2024-23334.
0x4d31/awesome-oscpA curated list of awesome OSCP resources
onion2203/lab_reportlabThis lab was set up to test CVE-2023-33733
