Tools

subzer0x0/react2shell

Intentionally vulnerable Next.js lab for CVE-2025-55182 exploitation research. Docker-packaged environment for practicing web application security…

tasooshi/horrors-log4shell

Micro lab for CVE-2021-44228 (Log4Shell) with automated multi-target exploitation, runtime payload generation, and adjustable bypasses for security…

opsxcq/exploit-cve-2014-6271

Docker-based Shellshock (CVE-2014-6271) exploit environment with ready-to-use attack scripts for CGI, SSH, and DHCP vectors. Includes vulnerable Bash…

blasty/cve-2021-41773

Docker-based playground for testing CVE-2021-41773, demonstrating local file disclosure and remote code execution in Apache HTTPd 2.4.49.

blueteamsteve/cve-2021-41773

Provides vulnerable Docker images for CVE-2021-41773 (Apache path traversal) with PoCs for file read and RCE, enabling security testing and practice.

bhdresh/cve-2018-11776

Dockerized vulnerable environment for CVE-2018-11776 with proof-of-concept exploits, enabling hands-on testing of Apache Struts2 remote code…

alpereny-cs/cve-2025-24813

Hands-on lab environment for testing Apache Tomcat unauthenticated RCE (CVE-2025-24813) with Docker setup and step-by-step exploitation guide.

j4ck3lsyn-gen2/cve-2025-53770

Isolated research lab and proof-of-concept for validating a SharePoint deserialization vulnerability (CVE-2025-53770) with a Python exploit driver,…

srcporter/cve-2021-44228

Deliberately vulnerable Spring Boot application containing the Log4Shell (CVE-2021-44228) remote code execution vulnerability for controlled security…

kuttappu123/cve-2023-30212-lab

Hands-on lab environment for exploiting CVE-2023-30212, a stored XSS vulnerability in OURPHP ≤7.2.0, using Docker containers for safe penetration…

abcfabian/react2shell-cve-2025-55182-testing-environment

A containerized testing environment for CVE-2025-55182, a critical (10.0 CVSS) Remote Code Execution vulnerability in React Server Components.

flame-11/cve-2018-15133-laravel-framework

Reproducible Docker lab for CVE-2018-15133 (Laravel Framework token unserialize RCE) with a known APP_KEY and a /poc route for testing exploit…

netw0rk7/cve-2022-0543-home-lab

CVE-2022-0543 - Redis RCE Vulnerability home lab for Red Teaming, Penetration Testing Training with just one DOCKER

cved-sources/cve-2018-7600

Docker container for CVE-2018-7600 (Drupalgeddon2) vulnerability exploitation, part of the Cved framework for managing vulnerable Docker environments…

cved-sources/cve-2018-1273

Docker container for CVE-2018-1273 exploitation lab, part of the Cved vulnerable environment management framework for security training and testing.

cved-sources/cve-2017-4971

Docker-based vulnerable environment for CVE-2017-4971 (Spring WebFlow RCE) to practice exploitation and security testing in a controlled lab setup.

cved-sources/cve-2017-8917

Docker container reproducing Joomla vulnerability CVE-2017-8917 for security testing, education, and practice in a sandboxed environment.

baktistr/cve-2025-59532-poc

Docker-based research environment for analyzing CVE-2025-59532, a path traversal in OpenAI Codex CLI, with vulnerable and patched versions for…