
not-going-anywhere
Intentionally vulnerable Golang programs exposing web, gRPC, and database/sql flaws for security training, vulnerability discovery, and remediation…

Intentionally vulnerable Golang programs exposing web, gRPC, and database/sql flaws for security training, vulnerability discovery, and remediation…


WVCTF or WebVulnCTF is a gamified web platform which promotes training in pentesting and web application development security in an entertaining way.…

This repository provides a learning environment to understand how an Exim RCE exploit for CVE-2018-6789 works.

reproducing an old istio bug

Exploit PoC and root-cause analysis for a critical unauthenticated PHP object injection in WordPress Database for Contact Form 7, leading to RCE via…

Blue Team detection lab created with Terraform and Ansible in Azure.

A fully functional DanderSpritz lab in 2 commands

Bash script for Privilege Escalation via "ndsudo" (Netdata Local Exploit)

Testing POC for use cases

Explorations of CVE-2024-49368 + Exploit Development

Step-by-step tutorial demonstrating how to set up a vulnerable Apache 2.4.49 environment and exploit CVE-2021-41773 path traversal using Kali Linux…

Docker-compose to set up a test environment for exploiting CVE-2015-8562