
php-cve-2026-10961x-lab-poc
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full…

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full…

Athena OS is a Arch/Nix-based distro focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!

Small and highly portable detection tests based on MITRE's ATT&CK.

Pre-Built Vulnerable Environments Based on Docker-Compose

Fully featured and community-driven hacking environment

HiddenSteps — a local-first personal workflow intelligence platform

A lightweight, multi-layer Linux sandbox combining namespaces, pivot_root, seccomp-bpf, capability dropping, and an evidence-based verdict engine…

红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool

A collection of awesome platforms, blogs, documents, books, resources and cool stuff about security

Docker-based lab environment to reproduce and test CVE-2022-42889 (Text4Shell) remote code execution vulnerability in Apache Commons Text.

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

Free hands-on digital forensics labs for students and faculty

CatSniffer is an original multiprotocol and multiband board for sniffing, communicating, and attacking IoT (Internet of Things) devices using the…

🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.

This repository provides a centralized resource for operational cyber defense and offense, compiling Theory, Tools, Operating Procedures, and…

Deliberately vulnerable web application with interactive lessons and challenges for learning web application security and penetration testing…

Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!