#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
sastraadiwiguna-purpleeliteteaming/holistic-deconstruction-of-cve-2019-5736-This repository provides a high-fidelity technical deconstruction and production-ready exploitation suite for CVE-2019-5736. It demonstrates how a…
sastraadiwiguna-purpleeliteteaming/ddos-purple-teaming-offensive-multi-vector-7-tier-defensive-holistic-blueprint-Replicable Blueprint for advanced DDoS Purple Teaming, engineered for the threat landscape. It integrates a Red Elite Teaming offensive…
aninfosec/cve-2025-1094It is an input sanitization flaw caused by an encoding mismatch, allowing crafted input to bypass filters. If a server is vulnerable, an attacker can…
adolfbharath/mongobleedCVE-2025-14847 explaination and lab
joe1sn/cve-2022-22965CVE-2022-22965 Environment
baihliu/ruoyi-4.2-shiro-721-docker-poc若依4.2 (Shiro 1.4.1) Shiro-721 (CVE-2019-12422)漏洞复现环境
prabeershakya/cve-2022-0185-pocProof-of-concept exploit for CVE-2022-0185, a Linux kernel heap buffer overflow enabling local privilege escalation and container escape via FUSE and…
vigilante-1337/cve-2024-11635The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.12 via the…
vigilante-1337/cve-2023-29386PoC CVE-2023-29386 — Manager for Icomoon < 2.1 - Unauthenticated Arbitrary File Upload
vaidehim55/cve-2019-9978-rce-pocA custom Python proof-of-concept showcasing root-cause analysis and exploitation of CVE 2019-9978 (Social Warfare plugin),focusing on practical RFI…
liamromanis101/cve-2025-55182Python exploit for CVE-2025-55182, a server-side JavaScript injection in Next.js/React enabling remote code execution via malformed multipart form…
khalilu020/offensive-security-adversary-emulationSimulated a real-world attack (CVE-2011-2523) against a vulnerable host, then cross-checked detection coverage against an existing…
threatradarai/trai-001-critical-rce-vulnerability-in-apache-parquet-cve-2025-30065-simulationA CVSS 10.0-rated vulnerability in the parquet-avro Java module allows remote code execution via unsafe deserialization when parsing schemas. Tracked…
sastraadiwiguna-purpleeliteteaming/llamastack-rce-deterministic-supply-chain-exploitation-hardening-framework-cve-2024-50050-LlamaStack-RCE: Deterministic Supply Chain Exploitation & Hardening Framework [CVE-2024-50050] Focus on AI Security Research…
flame-11/cve-2024-3408-dtaleVuln lab for CVE-2024-3408 - D-Tale Authentication Bypass & RCE
s41r4j/cve-2025-48384GIT vulnerability | Carriage Return and RCE on cloning
astraljays/traditionaljayIntentionally vulnerable VM-hosted Java shop — Log4Shell (CVE-2021-44228) workshop lab (EC2 / Azure VM / GCE)
religan/cve-2023-20198A cybersecurity case study analysing CVE-2023-20198 in Cisco IOS XE, covering vulnerability exploitation, mitigation strategies, secure software…
