Labs & Practice

kartheekkandalam99/svpt_cw_2

CVE-2024-21413 Setup for CW

t0kx/exploit-cve-2016-9920

Roundcube 1.0.0 <= 1.2.2 Remote Code Execution exploit and vulnerable container

asg-castle/cve-2021-4034

Security documentation and lab companion for the polkit pkexec local privilege escalation, with a TryHackMe room for hands-on exploitation practice.

neuralinhibitor/xzwhy

XZ Utils CVE-2024-3094 POC for Kubernetes

asfandalimemon25/cve-2023-50164analysis-

CVE-2023-50164 An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a…

lon5948/cve-2023-4357-exploitation

Reproduction environment for CVE-2023-4357 Chrome XXE vulnerability with SVG-based file access bypass exploit and step-by-step setup instructions.

techieneurons/cve-2024-3116_rce_in_pgadmin_8.4

Making a lab and testing the CVE-2024-3116, a Remote Code Execution in pgadmin <=8.4

badsectorlabs/ludus_xz_backdoor

An Ansible Role that installs the xz backdoor (CVE-2024-3094) on a Debian host and optionally installs the xzbot tool.

paras98/cve-2021-38297-go-wasm-replication

Educational proof-of-concept replicating CVE-2021-38297, a Go WASM buffer overflow leading to stored XSS. Includes vulnerable app setup, exploit…

louisliunova/cve-2019-14271_exploit

A convenient and time-saving auto script of building environment and exploit it.

magpieryl/cve-2024-3094-backdoor-env-container

This is a container environment running CVE-2024-3094 sshd backdoor instance, working with https://github.com/amlweems/xzbot project. IT IS NOT…

ducanh2oo3/vulnerability-research-cve-2017-0144

LAB: TẤN CÔNG HỆ ĐIỀU HÀNH WINDOWS DỰA VÀO LỖ HỔNG GIAO THỨC SMB.

adarkst/honeypot_smart_infrastructure

This Repository Includes Kubernetes manifest files for configuration of Honeypot system and Falco IDS in K8s environment. There are also Demo…

sakilahamed/linux-kernel-exploit-lab

More specific : Dirty COW (CVE-2016-5195)

prateek147/dvia-v2

Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security…

syn-4ck/wvctf

WVCTF or WebVulnCTF is a gamified web platform which promotes training in pentesting and web application development security in an entertaining way.…

lilly-dox/exploit-cve-2023-22518

Exploit for CVE-2023-22518 in Atlassian Confluence. Provides a detailed walkthrough of the vulnerability, including environment setup, root cause…