#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
astraljays/traditionaljayIntentionally vulnerable VM-hosted Java shop — Log4Shell (CVE-2021-44228) workshop lab (EC2 / Azure VM / GCE)
religan/cve-2023-20198A cybersecurity case study analysing CVE-2023-20198 in Cisco IOS XE, covering vulnerability exploitation, mitigation strategies, secure software…
bigbluewhale111/cve-2025-55182-labHands-on lab environment for reproducing CVE-2025-55182, providing setup instructions and notes for security researchers to analyze and understand…
zedocun/soc-investigation-powershell-edrfreezeSOC investigation of CVE-2024-49138 exploitation alert involving PowerShell, EDRFreeze execution, and defense evasion behavior in a simulated…
apipia/log4j-pcap-activityA fun activity using a packet capture file from the log4j exploit (CVE-2021-44228)
80ottanta80/cve-2024-32019-pocBash script for Privilege Escalation via "ndsudo" (Netdata Local Exploit)
abhisek3122/cve-2025-23167Working exploit for CVE-2025-23167 – HTTP request smuggling in vulnerable Node.js 20.x versions before 20.19.2
hashdr1ft/soc274-palo-alto-networks-pan-os-command-injection-vulnerability-exploitation-cve-2024-3400SOC lab exercise for analyzing and responding to Palo Alto Networks PAN-OS command injection vulnerability (CVE-2024-3400) with step-by-step incident…
xxxtectationxxx/cve-2017-16995Berisi 2 program C dari exploitDB untuk melakukan privillage eskalation untuk ubuntu 16.04
artemcyberlab/project-project-chimera-exploiting-a-modern-wordpress-xxe-to-pillage-secrets-The objective is to conduct a full-scale security assessment of a WordPress-based web application, culminating in a complete server compromise. The…
mike-williams/struts2vulnStruts 2 web app that is vulnerable to CVE-2017-98505 and CVE-2017-5638
nabilboudra/cve-2017-5123Educational demonstration of CVE-2017-5123 kernel exploit, ICMP-based rootkit command-and-control, and OS command injection vulnerable web…
danielhallbro/cve-2022-36804-bitbucket-rce-analysisFull-chain reproduction of CVE-2022-36804 (Bitbucket RCE). Includes a Dockerized laboratory, pspy64 monitoring for null-byte injection verification,…
yass2400012/email-exploit-moniker-link-cve-2024-21413-Proof-of-concept exploit for CVE-2024-21413 using Moniker Link in HTML email to trigger SMB connection and capture netNTLMv2 hashes via Responder.…
mooowu/cve-2025-55182-pocLab environment and PoC exploit for CVE-2025-55182 (React2Shell), a critical RCE vulnerability in React Server Components. Includes vulnerable app,…
fankh/cve-2025-55182-test-lab-windowsDocker-based test lab for CVE-2025-55182 (React2Shell) RCE vulnerability in React 19.1.0/Next.js 15.1.0. Includes exploit scripts, WAF bypass testing…
tarekhshaikh13/cve-2025-55184Target Code + Exploit
boianeduard/cve-2025-1974ingress-nginx admission controller RCE escalation PoC
