cve-lfi-lab
thecyberfairy/cve-lfi-labA hands on lab investigating CVE-2025-39507 from a Tier 1 SOC analyst perspective. Includes log review in Microsoft Sentinel, IP analysis, real world…
ctfeducationincident-response+5
thecyberfairy/cve-lfi-labA hands on lab investigating CVE-2025-39507 from a Tier 1 SOC analyst perspective. Includes log review in Microsoft Sentinel, IP analysis, real world…
netlas-io/netlas-cookbookThe goal of this guide is very simple - to teach anyone interested in cyber security, regardless of their knowledge level, how to make the most of…
mk-ultra-project-monarch/cve-2017-7921-writeup-2026Vulnerability research write-up on CVE-2017-7921 — a critical unauthenticated auth bypass in Hikvision IP cameras/DVRs/NVRs, covering root cause,…
tim-hoekstra/cve-2024-24919Multi-threaded exploit script for CVE-2024-24919 that scans a list of IP addresses and outputs results, intended for educational use.
papayajackal/ipeeyoupeewepeeScanner and attack suite for hosts that forward unauthenticated packets via IPIP and GRE protocols. (CVE-2020-10136 CVE-2024-7595)
saku0512/cve-2026-72815-pocLocal Go PoC demonstrating CVE-2026-72815, an X-Forwarded-For IP spoofing flaw in go-chi/chi middleware.RealIP that bypasses IP-based ACLs, with a…
snailsploit/cve-2026-33693CVE-2026-33693: SSRF via 0.0.0.0 Bypass in activitypub-federation-rust v4_is_invalid() (CVSS 6.5 Moderate)
sic4rio/cve-2015-3224Ruby on Rails Web Console Exploit (CVE-2015-3224)
cybervinner/cp-plus-ez-p21-cve-2026-65893-65894Documents CP PLUS EZ-P21 IP camera CVEs: arbitrary code execution via debug feature and improper authentication of HTTP endpoints, with responsible…
d0rb/cve-2021-34527Python PoC for CVE-2021-34527 (PrintNightmare) that sends a hard-coded SMB exploit payload to a target IP and port for educational demonstration.
0nin0hanz0/cve-2024-24919-pocProof-of-concept exploit for CVE-2024-24919, an unauthenticated file read in Check Point Security Gateways; scans single or multiple IP targets and…
lkarlslund/deploy-goadScript to install prerequisites for deploying GOAD on Ubuntu Linux 22.04
ianxtianxt/tor-ip-changerSimple shell script to automatically request new Tor identity at configurable intervals for IP rotation.
palahsu/ddos-ripperPython-based DDoS attack tool for flooding targets with traffic via IP and port specification. Designed for educational stress-testing and network…
alperenugurlu/nac_bypass_agentThis function combines all the above functions and takes necessary information from the user to change the IP and MAC address, start the responder…
wvllxe/cve-2026-104051-pictshare-info-disclosureSensitive info disclosure via info API in PictShare < 3.7.1 (CWE-522). PoC + advisory writeup.
typicalsmc/cve-2025-49132-pocProof-of-concept exploit for CVE-2025-49132, a path traversal vulnerability in Pterodactyl panel. Forges session cookies using exposed Redis server…
evillm/cve-2024-45590-pocProof-of-concept exploit for CVE-2024-45590, demonstrating unauthenticated remote code execution in a WordPress plugin via arbitrary file upload.…