Exegol
theporgs/exegolFully featured and community-driven hacking environment
ctfeducationlabs-practice+3
theporgs/exegolFully featured and community-driven hacking environment
eshard/scaredPython framework for performing side-channel analysis attacks (e.g., CPA) on public datasets, designed for educational use and hands-on practice in…
ransomleak/training-application-securityInteractive secure coding training with hands-on SCORM exercises covering OWASP Top 10 web and API vulnerabilities, Git/secrets exposure, and…
owasp/wrongsecrets-binariesSource code for the Binaries of OWASP WrongSecrets
microsoft/whatthehackA collection of challenge based hack-a-thons including student guide, coach guide, lecture presentations, sample/instructional code and templates. …
100daysofyara/2026Rules shared by the community from 100 Days of YARA 2026
alihzsec/cve-2024-28000Hands-on exploit lab for CVE-2024-28000 — unauthenticated privilege escalation in LiteSpeed Cache (WordPress plugin, <=6.3.0.1). Spins up a…
dungsocool/cve-2017-5638Hands-on lab demonstrating Apache Struts2 OGNL injection (CVE-2017-5638) with step-by-step system analysis, exploitation, sandbox bypass, and…
carterperez-dev/cybersecurity-projectsBuilding 70 Projects ranging from beginner to advanced so anyone can — learn from, build upon, use as a reference, or even copy directly. Gamified…
laliea/cve-2021-46398A Proof of Concept for the CVE-2021-46398 flaw exploitation
gkrishnan724/cve-2021-38297A Proof of concept scenario for exploitation of CVE2021-38297 GO WASM buffer-overflow
cves-labs/cve-2026-22241Lab Environment for CVE-2026-22241
fathallah17/overlayfs-cve-2021-3493Exploit a 2021 Kernel vulnerability in Ubuntu to become root almost instantly!
0x4d31/awesome-threat-detectionCurated list of threat detection and hunting resources: detection rules, SIEM and log analysis tools, endpoint/network monitoring, datasets,…
stafordtituss/hazproneCloud pentesting framework deploying vulnerable-by-demand AWS resources with quest-based scenarios to teach practical penetration testing and…
paras98/cve-2021-38297-go-wasm-replicationEducational proof-of-concept replicating CVE-2021-38297, a Go WASM buffer overflow leading to stored XSS. Includes vulnerable app setup, exploit…
trailofbits/not-going-anywhereIntentionally vulnerable Golang programs exposing web, gRPC, and database/sql flaws for security training, vulnerability discovery, and remediation…
0xnxt1me/cve-2025-29927Proof-of-concept exploit for CVE-2025-29927 that adds x-middleware-subrequest to bypass Next.js middleware authentication checks.