Tools

cved-sources/cve-2018-15877

Docker container providing a pre-configured vulnerable environment for CVE-2018-15877, designed for security training and exploit practice within the…

devengpk/cve-2022-22965

Dockerized Spring4Shell (CVE-2022-22965) proof-of-concept with Python exploit script and webshell deployment for educational vulnerability testing.

aash035/cve-2023-30212

Docker-based vulnerable OURPHP lab for reproducing CVE-2023-30212, a reflected XSS vulnerability, with setup instructions and proof-of-concept…

z3bul0n/log4jtest

Terraform and Docker resources for quickly spinning up a test of CVE-2021-44428

mrmahile/massscanning-cve-2025-55182

A lightweight orchestrator and worker scanner setup for running large/continuous scans across split input files. This repository contains…

libasv/exploite-cve-2023-30212-vulnerability

Docker-based lab environment to exploit CVE-2023-30212, a cross-site scripting (XSS) vulnerability in OURPHP <= 7.2.0, with step-by-step setup and…

libasmon/-create-a-vulnerable-docker-environment-that-is-susceptible-to-cve-2023-30212

Docker environment and exploit the CVE-2023-30212 vulnerabilityVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or…

shoucheng3/eclipse__hawkbit_cve-2020-27219_0-3-0m6

Domain-independent back end for rolling out software updates to constrained edge devices, controllers, and gateways over IP-based infrastructure,…

shoucheng3/payara__payara_cve-2022-37422_5-2022-2

Jakarta EE and MicroProfile application server runtime for development and containerized deployments, supporting cloud-native middleware with…

reachabilityorg/cve-2022-42889-text4shell-docker

Dockerized vulnerable Java application demonstrating CVE-2022-42889 (Text4Shell) remote code execution via Apache Commons Text string lookups, for…

meganekos/secure-by-default-rce-demo

Secure-by-default demo lab showing how container hardening (distroless images, non-root, read-only filesystem, runtime-injected secrets) can…

performant-labs/cve-2024-22262

Proof-of-concept exploit for CVE-2024-22262 in Spring applications, with a Dev Container environment for hands-on vulnerability exploration and…

dima2021/cve-2022-42889-text4shell

Docker-based lab environment to demonstrate and test the CVE-2022-42889 (Text4Shell) remote code execution vulnerability in Apache Commons Text.

cgv-dev/metasploit-module-tfm

Module written in Ruby with the objective of exploiting vulnerabilities CVE-2023-2728 and CVE-2024-3177, both related to the secret mount policy in a…

sk3pper/cve-2024-21626-old-docker-versions

Analyzes and exploits a container escape vulnerability in legacy Docker/runc versions, demonstrating fd leakage to access the host filesystem, with…

performant-labs/cve-2022-22970

Hands-on Dev Container environment for exploring CVE-2022-22970 with a vulnerable Spring application and proof-of-concept exploit code.

cdxiaodong/cve-2021-25741

Proof-of-concept exploit for CVE-2021-25741 enabling Kubernetes container escape via subpath volume mount manipulation, designed for security testing…