gtfocli
cmd-tools/gtfocliGTFO Command Line Interface for easy binaries search commands that can be used to bypass local security restrictions in misconfigured systems.
ctfinformation-gatheringpenetration-testing+1
19
cmd-tools/gtfocliGTFO Command Line Interface for easy binaries search commands that can be used to bypass local security restrictions in misconfigured systems.
pallangyo98/trickster-htbThis report details exploiting Trickster via an XSS in PrestaShop (CVE-2024-34716) to gain www-data access, extracting database credentials for SSH…
niteeshpujari/cve-2025-32433-pocProof-of-concept exploit for CVE-2025-32433, enabling unauthenticated remote code execution in Erlang/OTP SSH. Includes Docker setup and reverse…
tempuss/ctf_cve-2020-7471CTF challenge exploiting CVE-2020-7471, a Django SQL injection vulnerability in PostgreSQL StringAgg, with Docker setup and exploit scripts.
baktistr/cve-2025-59532-pocA Docker-based research environment for analyzing CVE-2025-59532, a path traversal vulnerability in OpenAI Codex CLI that allows arbitrary file write…
eljoamy/mongobleed-exploitMongoBleed (CVE-2025-14847) Lab & PoC : A complete educational environment to reproduce the critical unauthenticated memory leak in MongoDB. Includes…
edgecases-purplehax/cve-imagesIntentionally-vulnerable nginx 1.30.0 CVE lab images (CVE-2026-40701/42934/42945/42946) for isolated security research. Lab use only.
rootdirective-sec/cve-2026-8181-labDocker lab demonstrating CVE-2026-8181 authentication bypass in Burst Statistics WordPress plugin. Compares vulnerable and patched versions with a…
rootdirective-sec/cve-2026-33626-labDocker Compose lab reproducing CVE-2026-33626 SSRF in LMDeploy's vision-language image loader. Compares vulnerable (0.12.0) and patched (0.12.3)…
rootdirective-sec/cve-2026-8206-labLocal Docker lab demonstrating CVE-2026-8206 unauthenticated account takeover in Kirki WordPress plugin. Compares vulnerable 6.0.6 vs patched 6.0.7…
rootdirective-sec/cve-2026-7465-labLocal Docker lab for analyzing and reproducing CVE-2026-7465 in Spectra Gutenberg Blocks WordPress plugin. Compares vulnerable vs patched versions…
rootdirective-sec/cve-2026-5718-labLocal Docker lab demonstrating CVE-2026-5718 arbitrary file upload in a WordPress plugin, with vulnerable and patched services for side-by-side…
rootdirective-sec/cve-2026-47100-analysis-labLocal Docker lab for reproducing CVE-2026-47100, an unauthenticated Stored XSS in FunnelKit for WooCommerce. Includes PoC scripts to compare…
omarkurt/django-connector-cve-2025-64459-testbedA self-contained testbed for Django CVE-2025-64459. Demonstrates QuerySet.filter() parameter injection via dictionary expansion using Docker.
m0d0ri205/wargame_re-lsCTF challenge exploiting CVE-2025-0184 DOCX SSRF vulnerability to access internal admin service and retrieve a flag. Includes exploit generator and…
rootdirective-sec/cve-2025-11262-labDocker lab for reproducing CVE-2025-11262, an unauthenticated stored blind XSS in Link Whisper Free WordPress plugin. Includes vulnerable and patched…
rootdirective-sec/cve-2026-3844-labLocal Docker lab for reproducing CVE-2026-3844, an unauthenticated arbitrary file upload to RCE in the WordPress Breeze Cache plugin. Compares…
hkcfs/pil-cve-2017-8291CVE-2017-8291 CTF with docker and examples