HTB-NanoCorp-CVE-2024-0670
dfdxarjy/htb-nanocorp-cve-2024-0670PowerShell exploit for CVE-2024-0670, abusing CheckMK Agent MSI repair to escalate from low-privileged user to SYSTEM on Windows targets. Designed…
binary-exploitationctfeducation+5
dfdxarjy/htb-nanocorp-cve-2024-0670PowerShell exploit for CVE-2024-0670, abusing CheckMK Agent MSI repair to escalate from low-privileged user to SYSTEM on Windows targets. Designed…
rootdirective-sec/cve-2026-46645-analysis-labDocker-based lab for reproducing CVE-2026-46645, an authorization bypass in SQLAdmin's ajax_lookup endpoint. Includes vulnerable and patched targets,…
rootdirective-sec/cve-2025-11262-labDocker lab for reproducing CVE-2025-11262, an unauthenticated stored blind XSS in Link Whisper Free WordPress plugin. Includes vulnerable and patched…
fineman999/poc_cve-2026-35037Local isolated reproduction lab for CVE-2026-35037, an unauthenticated SSRF vulnerability in Ech0's GET /api/website/title endpoint. Includes Docker…
rootdirective-sec/cve-2026-33626-labDocker Compose lab reproducing CVE-2026-33626 SSRF in LMDeploy's vision-language image loader. Compares vulnerable (0.12.0) and patched (0.12.3)…
adilkurtulmus/linux-copy-fail-cve-2026-31431Proof-of-concept exploit for CVE-2026-31431 (Copy-Fail), a Linux kernel AF_ALG and splice() flaw enabling page cache poisoning and local privilege…
cryingn/cve-2026-44656Reproduction environment for CVE-2026-44656, a Vim modeline command injection vulnerability. Includes Docker setup, PoC file, and exploit script to…
dhiaelhak-rached/cve-2026-39987-lab-or-marimo-cve-labEducational Docker lab demonstrating CVE-2026-39987, a pre-auth RCE via WebSocket authentication bypass in marimo, with exploit script and patch…
jithinodattu/cve-2007-4559-labSelf-contained Docker lab demonstrating CVE-2007-4559 (TarSlip) directory traversal via Python's tarfile module. Includes vulnerable and fixed APIs,…
lucastran05/cve-2023-48223Proof-of-concept demonstrating JWT algorithm confusion in fast-jwt library. Includes vulnerable server, token forging script, and verification fix…
experience-rookie/struts-s2-052-deserialization-rce-labProof-of-Concept exploit for Apache Struts S2-052 (CVE-2017-9805) XML Deserialization Remote Code Execution. Created while solving the INE eWPTX…
isabbii/poc---cve-2023-26482-rce-lab-nextcloudDocker-based lab reproducing CVE-2023-26482 (Nextcloud RCE) with automated exploit script for educational vulnerability analysis and exploitation…
isabbii/poc-apache-cve-2021-41773-infrastructure-labDocker-based lab for Apache CVE-2021-41773 path traversal and RCE exploitation with Python exploit script, demonstrating vulnerability analysis and…
flame-11/cve-2025-54068-livewireReproducible Docker-based lab for CVE-2025-54068 in Livewire v3.6.3, including a safe PoC exploit chain script for educational vulnerability analysis.
giriaryan694-a11y/cve-2025-32433_rce_exploitThis exploit script is designed to simplify exploitation of the Erlang/OTP SSH vulnerability CVE-2025-32433 in the TryHackMe lab environment.
cybersensei-eh/hackviser_labs_cve-2015-3306This is a customized script to help solve the lab on remote code execution under the CVE-2015-3306 lab.
kamalideenak/microsoft-defender-for-endpoint-deployment-on-windows-10-11-deviceThis repository documents how deployment of Microsoft Defender for Endpoint on a Windows 11 device, including onboarding via local script, enabling…
arun1033/cve-2025-48384Reproduction script for CVE-2025-48384, a git clone RCE via carriage return in submodule paths, demonstrating the vulnerability and providing a local…