#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
nekr0ff/needrestart-sudo-escalate-cve-2024-4890PoC exploit for CVE-2024-4890: Sudo privilege escalation via neecdrestart (>=3.8). Ethical lab-only. Scripts in Python and C.
grimmmbo/ros2_cve-2024-28231Demonstrating the usage of Fastrtps-DDS vulnerability CVE-2024-28231 within Ros2
ankitpandey383/cve-2025-32463-sudo-privilege-escalationPractical security research project exploiting CVE-2025-32463 to gain root access on a vulnerable sudo version. Includes write-up, PoC, and…
daniilorchikov/pil-cve-2017-8291Educational PoC for CVE-2017-8291 (GhostButt) demonstrating remote command execution via Python PIL/Pillow EPS image processing with GhostScript…
anonymking/cve-2018-11235CVE-2018-11235（PoC && Exp）
mrk336/cve-2021-3456A practical chain that starts with an innocuous PDF file and ends up in a reverse shell on an AWS EC2 instance
flame-11/cve-2017-20192-formidable-formsReproducible Docker lab for CVE-2017-20192 (Formidable Forms < 2.05.03 stored XSS) with automated PoC script for unauthenticated exploitation and…
alter-n0x/cve-2026-24061-pocCVE-2026-24061 - GNU InetUtils telnetd authentication bypass POC + Docker lab environment for testing
josemariamicoli/log4shell-poc**Log4Shell PoC is a high-fidelity exploitation environment designed to replicate the CVE-2021-44228 vulnerability.** It provides a containerized…
zeynepsilao/cve-2017-12611_exploitRCE project
sirbuvladste/bind-9-cache-poisoning-poc---cve-2025-40778Proof of Concept for CVE-2025-40778: BIND 9 DNS Cache Poisoning via unsolicited Additional Section records.
rahul-securify/react2shell-cve-2025-55182Proof-of-concept exploit for CVE-2025-55182 demonstrating remote code execution in Next.js via prototype pollution. Includes a pre-configured…
niokagi/react-cve-2025-55182Test & Analyze the CVE-2025-55182 vulnerability within Next.js Server Actions
malvector/cve-2025-70341CVE-2025-70341: Local Privilege Escalation via TOCTOU in App-Auto-Patch
maestro-ant/craftercms-cve-2025-6384PoC exploit for an authenticated RCE in CrafterCMS via Groovy sandbox bypass (CVE-2025-6384)
julichaan/cve-2024-32019-ndsudo-local-privilege-escalation-netdataPython PoC for Netdata LPE (CVE-2024-32019) exploiting unsanitized PATH in ndsudo to escalate privileges to root via hijacked binaries.
developerfred/cve-2022-31199Proof-of-concept exploits for CVE-2022-31199, a critical .NET deserialization RCE in Netwrix Auditor. Includes Python and PowerShell scripts, payload…
ahmedshamsddin/cve-2025-55182Python exploit for CVE-2025-55182 in React Server Components, injecting a shell into Next.js 16.0.6 applications. Includes a vulnerable app for…
