#1Training labs, hands-on environments, and reproducible challenges for authorized, safe cybersecurity practice.
Kitploit recommended
ndr-repo/cve-2018-7422Exploit for CVE-2018-7422: Local File Inclusion in WordPress Plugin Site Editor 1.1.1 [T1574.008]
cybersentinelx1/cve-2025-32462-exploitPoC exploit for CVE-2025-32462, a sudo privilege escalation via hostname spoofing. Demonstrates bypassing hostname-based restrictions to gain root…
spydomain/cve-2023-22809-automated-python-exploitsAutomates vulnerability check for sudo versions and privilege escalation via sudoedit if exploitable, helping users test and gain root access.
hashdr1ft/soc_287SOC287 - Arbitrary File Read on Checkpoint Security Gateway [CVE-2024-24919]
trax69/cve-2025-55182-pocProof of Concept for CVE-2025-55182 ("React2Shell"). A fully dockerized environment demonstrating Remote Code Execution (RCE) via insecure…
nyambiblaise/domain-controller-dc-exploitation-with-metasploit-impacketEnd-to-end Domain Controller exploitation using Metasploit and Impacket: discovered DC10, exploited Zerologon (CVE-2020-1472), extracted NTLM hashes,…
carlosaruy/cve-2025-55182a critical Remote Code Execution (RCE) vulnerability in React Server Components (RSC). It also includes a realistic "Lab Environment" to safely test…
trex96/vulnerable-bsr-lab-cve-2023-6933Hands-on lab for CVE-2023-6933, a PHP Object Injection vulnerability in Better Search Replace WordPress plugin, with Docker deployment, nuclei…
tnot123/cve-2017-9822In-depth technical analysis and proof-of-concept for CVE-2017-9822, an insecure deserialization vulnerability in DotNetNuke leading to remote code…
matiasarenhard/rails-cve-2017-17917Educational demonstration of CVE-2017-17917 SQL injection in Rails, with step-by-step replication and secure coding mitigation using parameterized…
phinehasnarh/cve-2024-4577-letsdefend-walkthroughThis is an Incident Response Walkthrough: Mitigating a Zero-Day Attack (CVE-2024-4577)
flame-11/cve-2018-15133-laravel-frameworkReproducible Docker lab for CVE-2018-15133 (Laravel Framework token unserialize RCE) with a known APP_KEY and a /poc route for testing exploit…
abhirajranjan/cve-2025-66478Intentionally vulnerable Next.js environment for testing security scanners against CVE-2025-55182, with PoC exploit and detection guidance.
kiroloskhairy/cve-2023-27372Safe PoC scanner and Docker lab for CVE-2023-27372, an RCE in SPIP CMS before 4.2.1. Verifies vulnerability via password recovery endpoint without…
goultarde/cve-2025-55182-react2shell-labCTF lab environment exploiting CVE-2025-55182 (RCE in React Server Components) with vulnerable Next.js blog, detection scripts, and manual exploit…
evillm/cve-2025-55182-pocSafe proof-of-concept scanner for CVE-2025-55182 with a Docker-based vulnerable Next.js stand for testing remote code execution.
tinashelorenzi/cve-2025-55182Proof-of-concept exploit for CVE-2025-55182, a critical unauthenticated RCE in React Server Components. Includes automated Python exploit, technical…
ps-interactive/cve-2025-55182Vulnerable REACT app in docker container and poc code - for demos
