
cve-2023-29357-Sharepoint
Proof-of-concept exploit for CVE-2023-29357 targeting SharePoint, with automated Vagrant lab environment for testing and education.

Proof-of-concept exploit for CVE-2023-29357 targeting SharePoint, with automated Vagrant lab environment for testing and education.

Python exploit script for CVE-2024-23897 (Jenkins RCE) with an automated Docker-based vulnerable lab for controlled security testing and education.

Proof-of-concept exploit for CVE-2022-0847 (Dirty Pipe) targeting Linux kernel versions 5.8–5.15. Provides reproduction environment setup and…

Automated exploit for DataEase: 4-vulnerability chain (auth bypass, JDBC blocklist bypass, SQL injection, Java deserialization) achieving…

Proof-of-concept exploit for CVE-2023-39362, an authenticated command injection in Cacti's SNMP options. Includes a vulnerable Docker environment for…

Proof-of-concept exploit for CVE-2023-27163, a Server-Side Request Forgery (SSRF) vulnerability in request-baskets up to v1.2.1. Includes automated…

Automated CVE-2022-26923 Exploitation (Certifried)

Recreating Shellshock (CVE-2014-6271) - the bash vulnerability that endangered millions of servers. Automated exploitation toolkit + Burp Suite…

Reproduces CVE-2026-42880, a critical ArgoCD vulnerability exposing Kubernetes Secrets via ServerSideDiff. Includes automated lab setup, trigger…

Local lab and proof-of-concept exploit for CVE-2025-27407, targeting GitLab's GraphQL introspection schema loader via the Direct Transfer HTTP path.…

Automated VirtualBox lab for exploiting CVE-2024-47176 (CUPS RCE) with a custom Python exploit, target Ubuntu VM, and Kali attacker VM for hands-on…

Educational lab demonstrating unauthenticated RCE in Langflow via CVE-2026-33017, with automated VM setup and a PoC exploit for reverse shell.

Docker-based lab environment for practicing CVE-2024-23897 Jenkins arbitrary file read exploitation with automated and manual attack scripts.

Academic lab for analyzing CVE-2025-55182 (React2Shell) with vulnerable and patched React Server Components environments, exploit shell, automated…

Ansible role that simulates a realistic CrushFTP CVE-2025-31161 exploitation scenario with rotating sensitive data files and automated defender…

Docker-based lab to reproduce CVE-2023-4863 (heap buffer overflow in libwebp) with automated crash demonstration, patched vs vulnerable comparison,…

Proof-of-concept exploit for CVE-2023-42456, demonstrating privilege escalation via sudo NSS library hijacking through chroot injection. Includes…

Multi-agent automated context management for long horizon tasks in local AI Agents