awesome-cyber-skills
joe-shenouda/awesome-cyber-skillsA curated list of hacking environments where you can train your cyber skills legally and safely
ctfcurated-resourceseducation+5
joe-shenouda/awesome-cyber-skillsA curated list of hacking environments where you can train your cyber skills legally and safely
iknowjason/awesome-cloudsec-labsAwesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.
why-success/fastjson-rce-labFastjson 1.2.83 RCE 靶场环境 (CVE-2026-16723)
seadragnol/cve-2023-52927Local privilege escalation exploit for CVE-2023-52927, a Use-After-Free vulnerability in the Linux kernel netfilter subsystem, with a KASAN trigger…
rootdirective-sec/cve-2025-11262-labDocker lab for reproducing CVE-2025-11262, an unauthenticated stored blind XSS in Link Whisper Free WordPress plugin. Includes vulnerable and patched…
soham23/firefox-rce-nssmilEducational standalone JavaScript implementation of the public exploit for CVE-2016-9079 (Firefox Use-After-Free), adapted from the original…
kiphuong/challenge-cve-2024-3552Docker-based CTF challenge exploiting CVE-2024-3552 in a web directory plugin. Start with docker-compose up and exploit the vulnerable WordPress-like…
sonuoffsec/dvapAn OWASP-aligned intentionally vulnerable platform for learning and testing AI, LLM, RAG, MCP, and Agentic AI security.
kali-mx/cve-2023-38408PoC for the recent critical vuln affecting OpenSSH versions < 9.3p2
h3raklez/cve-2025-14321Proof-of-concept demonstrating a Use-After-Free vulnerability in Firefox's RTCEncodedFrameBase via WebRTC Encoded Transforms, enabling heap…
h3raklez/cve-2025-21756Educational lab demonstrating a use-after-free (UAF) exploit in the Linux kernel's vsock subsystem for local privilege escalation to root, with…
gowonisgood/cve-2025-62215-pocProof-of-concept exploit for CVE-2025-62215, a Windows kernel Use-After-Free vulnerability in SepTokenSidSharingEnabled. Includes a kernel driver and…
kkaanozturk/hyperos-directory-traversal-analysisXiaomi HyperOS AVCodec Medya Framework'ündeki Use-After-Free (CVE-2025-21082) Zafiyetinin Derinlemesine Analizi, Rust Simülasyonu ve İnteraktif Web…
byt3quester/cve-2023-20938-pocLocal privilege escalation proof-of-concept for CVE-2023-20938, a use-after-free in Android binder, achieving root and disabling SELinux on…
0xcyberstan/cve-2026-46215-pocExploit for CVE-2026-46215, a Linux kernel DRM GEM use-after-free local privilege escalation. Uses racing, slab spraying, and Dirty Pipe-style file…
mytechnotalent/reverse-engineeringA FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.
security-prince/resources-for-application-securitySome good resources for getting started with application security
webpwnized/mutillidaeOWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an…