Labs & Practice

cpyre/cve-2012-2982

Practice POC scripting in Tryhackme’s intro poc scripting room (For Linux)

jolynngsc/zerologon_cve-2020-1472

Step-by-step lab guide for simulating, detecting, and mitigating the Zerologon vulnerability (CVE-2020-1472) on Windows Server 2016 using Kali Linux…

dcm2406/cve-lab

Instructions for exploiting vulnerabilities CVE-2021-44228 and CVE-2023-46604

bl34chig0/telstra-cybersecurity-virtual-experience-

A simple python script for a firewall rule that blocks incoming requests based on the Spring4Shell (CVE-2022-22965) vulnerability

z3robyte/cve-2024-23334-poc

A proof of concept of the path traversal vulnerability in the python AioHTTP library =< 3.9.1

matrexdz/cve-2024-1071-docker

Docker-based lab for practicing WordPress CVE-2024-1071 exploitation with automated PoC scripts and step-by-step setup instructions.

ktokkawu/l4s-vulnapp

This is a potentially vulnerable Java web application containing Log4j affected by log4shell(CVE-2021-44228).

yoryio/cve-2024-23897

Scanner for CVE-2024-23897 - Jenkins

cmnatic/cve-2024-21413

CVE-2024-21413 PoC for THM Lab

eurogig/jankybank

Simple Java Front and Back end with bad log4j version featuring CVE-2021-44228

trackflaw/cve-2024-1071-docker

CVE-2024-1071 with Docker

bittentech/bug-bounty-beginner-roadmap

This is a resource factory for anyone looking forward to starting bug hunting and would require guidance as a beginner.

mainframed/dc30_workshop

DEFCON 30 Mainframe buffer overlow workshop container

jakabakos/cve-2023-39362-cacti-snmp-command-injection-poc

Proof-of-concept exploit for CVE-2023-39362, an authenticated command injection in Cacti's SNMP options. Includes a vulnerable Docker environment for…

lorentzenman/sheepl

Emulates realistic user behavior in Active Directory lab environments for red and blue team tradecraft development. Generates random benign user…

knqyf263/cve-2023-50387

Educational proof-of-concept for the DNSSEC KeyTrap vulnerability (CVE-2023-50387) with a Docker-based lab environment to demonstrate algorithmic…

tenable/cnappgoat

CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.

nu11secur1ty/vulnerable-pdf

Educational PDF files demonstrating client-side exploitation techniques, including calculator execution and directory browsing, for security testing…