Tools

chessredoffsec/cve-2023-26208

Python script with GUI for automated payload testing against login endpoints, designed for educational exploitation simulation and vulnerability…

martinvks/cve-2022-45059-demo

Interactive demo of CVE-2022-45059 Varnish Cache request smuggling vulnerability. Includes Spring Boot web app, vulnerable proxy, automated victim…

nu11secur1ty/cve-2021-44228-vuln-app

Dockerized vulnerable web application demonstrating the Log4j CVE-2021-44228 remote code execution vulnerability for educational exploitation and…

pravin-pp/log4j2-cve-2021-45046

Sample Spring Boot web application vulnerable to Log4j2 CVE-2021-45046, demonstrating JNDI injection and infinite loop exploitation for educational…

jrrdev/cve-2017-5638

Docker-based vulnerable environment and Python exploit script demonstrating CVE-2017-5638 (Apache Struts2 RCE) for educational security testing.

jrrdev/cve-2014-0050

CVE-2014-0050 Vulnerable site sample

7huukdlnkjkjba/cve-2025-55315-

Research and analysis of CVE-2025-55315, providing a Python script for studying the vulnerability's technical details and potential exploitation…

c0n5n3d/cve-2021-43657

Proof-of-concept and reference implementation for CVE-2021-43657, a vulnerability found in an Employee Task Management System, demonstrating…

meraj1312/cve-2018-7600-drupalgeddon2-lab

Educational lab demonstrating CVE-2018-7600 (Drupalgeddon2) Remote Code Execution using a Docker-based vulnerable Drupal 7.56 environment.

shndnth/cve-2022-30190

Educational Proof-of-Concept for the CVE-2022-30190 (Follina) vulnerability.

cmadhushanka/wordpress-rce-vapt-cve-2020-25213

Educational cybersecurity project demonstrating exploitation and mitigation of CVE-2020-25213 (WordPress File Manager Plugin RCE). Includes malware…

borahll/cve-2021-21220

Educational presentation detailing the exploitation of CVE-2021-21220, a V8 JIT type confusion leading to OOB access and RCE via WebAssembly, with…

isabbii/poc---cve-2023-26482-rce-lab-nextcloud

Docker-based lab reproducing CVE-2023-26482 (Nextcloud RCE) with automated exploit script for educational vulnerability analysis and exploitation…

nu11secur1ty/vulnerable-pdf

Educational PDF files demonstrating client-side exploitation techniques, including calculator execution and directory browsing, for security testing…

chia33164/cve-2019-8641-reproduction

Reproduction code for CVE-2019-8641, designed for educational demonstration of the vulnerability exploitation process.

fernando-olv/joomla-cve-2023-23752

This Python implementation serves an educational purpose by demonstrating the exploitation of CVE-2023-23752. The code provides insight into the…

syedghufranraza/cve-2018-7600-remote-code-execution

This repository showcases a fully self-developed Proof-of-Concept (PoC) for CVE-2018-7600, widely known as Drupalgeddon 2. This critical…