CVE-2015-1328
fernandocassiodev/cve-2015-1328Step-by-step walkthrough for exploiting CVE-2015-1328 (OverlayFS) to escalate privileges from a low-privileged user to root on Ubuntu 14.04. Includes…
binary-exploitationctfeducation+3
fernandocassiodev/cve-2015-1328Step-by-step walkthrough for exploiting CVE-2015-1328 (OverlayFS) to escalate privileges from a low-privileged user to root on Ubuntu 14.04. Includes…
soham23/firefox-rce-nssmilEducational standalone JavaScript implementation of the public exploit for CVE-2016-9079 (Firefox Use-After-Free), adapted from the original…
suriyaboon/hackthebox-factsHTB Facts is a Easy Linux box featuring Camaleon CMS and MinIO. Gain admin access via open registration and a mass assignment vulnerability, then…
mmoobbeeiidat-design/hack-the-box-nexus-findings-reportHTB_Nexus Penetration Test Report – Comprehensive security assessment documenting credential leakage from Gitea, CVE-2026-38526 exploitation in…
anxs3c/twomillion-machine-writeupFrom deobfuscating code.js to root, CVE-2023-0386
moscvv/thm-cybersec-portfolioWrite-ups from completed TryHackMe rooms — Linux privilege escalation, sudo buffer overflow (CVE-2019-18634), and OWASP Top 10 (2025).
davidaroca27/cve-2024-23346-exploitThis is a exploit for the known Remote Code Execution (RCE) vulnerability in the `pymatgen` (CVE-2024-23346) Python library by uploading a malicious…
disnaming/cve-2022-34169A PoC for CVE-2022-34169, for the SU_PWN challenge from SUCTF 2025
4xura/php_filter_chain_oracle_pocPoC scripts to exploit LFR (Local File Read) via PHP filters chain oracle (php://filter), especially for CTF purposes or the exploit of…
paulameg/simplectf-thm-walkthroughFirst CTF successfully completed! This repo documents my walkthrough of TryHackMe's Simple CTF. It covers network reconnaissance (Nmap), web…
apipia/log4j-pcap-activityA fun activity using a packet capture file from the log4j exploit (CVE-2021-44228)
thecyberfairy/cve-lfi-labA hands on lab investigating CVE-2025-39507 from a Tier 1 SOC analyst perspective. Includes log review in Microsoft Sentinel, IP analysis, real world…
elusivehacker/cve-2019-7214For CTF use only (the CVE-2019-7214 also resolves the host from /etc/hosts)
fauzan-aldi/cve-2022-21661A Python PoC for CVE-2022-21661, adapted from z92g's Go PoC, designed to demonstrate the vulnerability in a more accessible scripting environment.
abdibimantara/cve-2022-30190-analysis-with-letsdefends-labthis is my simple article about CVE 2022-30190 (Follina) analysis. I use the lab from Letsdefend.
rishabh-kumar-cyber-sec/cve-2023-27163-ssrf-to-port-scanningIt is a simple script to automate internal port scanning dueto SSRF in requests-baskets v 1.2.1. this script can also assisst in solving 'SAU'…
l4st98/cve-2026-33017-fireflowProof-of-concept RCE for Langflow CVE-2026-33017 using a malicious custom component to execute OS commands via build_public_tmp and retrieve output…
prapul1/vulnhub-dc1-writeupVulnHub DC-1 boot-to-root — exploiting CVE-2018-7600 (Drupalgeddon2) for RCE, extracting DB credentials from settings.php, forging admin password…