Why-so-Serious-SAM
p1rat3r00t/why-so-serious-samPoC malware that uses exploit CVE-2021-36934 (improper ACLs on shadow copies) using a fileless red team method on Windows 10/11 with LOLBins,…
ctfeducationexploitation+6
p1rat3r00t/why-so-serious-samPoC malware that uses exploit CVE-2021-36934 (improper ACLs on shadow copies) using a fileless red team method on Windows 10/11 with LOLBins,…
jolynngsc/zerologon_cve-2020-1472Step-by-step lab guide for simulating, detecting, and mitigating the Zerologon vulnerability (CVE-2020-1472) on Windows Server 2016 using Kali Linux…
eesshq/cve-2017-0144---etneralblue-ms17-010-remote-code-executionStep-by-step guide to exploiting MS17-010 EternalBlue vulnerability on Windows Server 2008 R2, including reconnaissance, exploitation,…
alexojocyber/cve-2011-2523-vsftpd-validation-labAuthorized Kali–Metasploitable2 lab using Python and Nmap NSE to validate CVE-2011-2523 in vsFTPd 2.3.4.
op7ic/blueteam.labBlue Team detection lab created with Terraform and Ansible in Azure.
ibondarenko1/azure-sentinel-detection-engineering9 MITRE ATT&CK-mapped KQL detections on a live Microsoft Sentinel + Defender XDR environment (control-plane, endpoint, identity), with a PR-gated…
irsaattiquecyber/systemvulnerabilitychecklist_project4_decodelabsSystem Vulnerability Checklist & Network Security Hardening project featuring reconnaissance, vsFTPd backdoor analysis (CVE-2011-2523), and active…
legendile7/cve-2026-78122-pocProof-of-concept exploit for CVE-2026-78122, demonstrating container filesystem and environment variable exfiltration through docker-socket-proxy's…
mrk336/from-foothold-to-domain-admin-weaponizing-cve-2025-54918-in-real-world-devopsSimulated exploitation and mitigation of CVE-2025-54918 (Windows NTLM flaw). Includes detection scripts, Ansible patching, and CI/CD hardening.…
t0tooro/cve-2025-24054-labBlue-team lab: detecting & mitigating CVE-2025-24054 (Windows NTLM hash disclosure) with Sysmon, Wazuh SIEM, and Group Policy
srkyn/nginx-map-risk-auditDefensive NGINX CVE-2026-42533 map regex risk audit with config scanner, Splunk/Defender notes, and lab evidence.
arisharazakhan-cpu/dod-blue-team-network-labHigh fidelity defensive security lab simulating a DoD aligned enterprise network with Active Directory, VLAN segmentation, STIG based hardening,…
kamalideenak/microsoft-defender-for-endpoint-deployment-on-windows-10-11-deviceThis repository documents how deployment of Microsoft Defender for Endpoint on a Windows 11 device, including onboarding via local script, enabling…
hirokiii/cve-2023-44487Educational environment for LTAT.04.022 Homework 4.
nickvourd/windows-local-privilege-escalation-cookbookWindows Local Privilege Escalation Cookbook
cyberdefenders/detectionlabelkDetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.
shenli/distributed-system-testingAI-agent skills for distributed-systems testing
kingsrule50/nessus-vulnerability-scanning-labEnterprise vulnerability management on Azure — Terraform-deployed Nessus scanner, credentialed scanning, CVE-2013-3900 remediation with verified…