vulhub

Vulhub is an open-source collection of pre-built, ready-to-use vulnerable Docker environments. With just one command you can launch a vulnerable environment for security research, learning, or demonstration, no prior Docker experience required. 中文版本Chinese version Quick Start Install Docker examp...

DVWA

DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Application DVWA is a PHP/MariaDB web application that is damn vulnerable. Its main goal is to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of...

dotdotslash

dotdotslash An tool to help you search for Directory Traversal Vulnerabilities Benchmarks Platforms that I tested to validate tool efficiency: DVWA low/medium/high bWAPP low/medium/high Screenshots Instalation You can download the last version cloning this repository root@kitploit: git clone...

csaf

Фреймворк повышения осведомлённости в области кибербезопасности CSAF — это структурированный подход, направленный на повышение осведомлённости и понимания кибербезопасности среди отдельных лиц, организаций и сообществ. Он предоставляет рекомендации по разработке эффективных программ повышения...

cve-images

cve-images — intentionally vulnerable lab images A collection of deliberately vulnerable Docker images for security study in an isolated lab. Started as nginx CVE reproductions and is growing into a broader set of vulnerable-by-design images e.g. DVWA. ⚠️ Safety These images are vulnerable on...

Open-Worldwide-Application-Security-Project-OWASP-

Открытый-Всемирный-Проект-Безопасности-Приложений-OWASP- Автоматизированная оценка уязвимостей веб-приложений DVWA с помощью OWASP ZAP для выявления и анализа критических недостатков безопасности, таких как удаленное выполнение кода CVE-2012-1823...

DVWA-ZAP-PENTEST

Оценка уязвимостей DVWA с помощью OWASP ZAP Практическая оценка безопасности веб-приложения DVWA Damn Vulnerable Web App , выполненная с использованием OWASP ZAP Zed Attack Proxy 2.17.0. В этом проекте задокументирован полный рабочий процесс: разведка spidering, автоматическое сканирование...

CVE-2014-160

CVE-2014-160 эксплойт Используйте так: ./cve-2014-160 dvwa.local https && strings datadump.bin...

07-Web-Application-Security

Cybersecurity Home Lab - Lab 7: Web Application Security O...

Vulnerability_Assessment_and_Exploitation

VulnerabilityAssessmentandExploitation This assessment was...

dvwa-rce-finding-chain

DVWA Finding Chain: Stored XSS to Persistent RCE A pentes...

dvwa-web-attack-lab

Web Application Penetration Testing Lab Platform: Kali Li...

python-vuln-scanner

Python Vulnerability Scanner !Pythonhttps://img.shields.io...

ethical-hacking-portfolio

Ethical Hacking Portfolio - CS4069 | Spring 2026 Course:...

incident-response-lab

🔥 Incident Response Lab - SOC Toolkit !Pythonhttps://img.s...

LFI-DVWA-Lab-

LFI Exploitation – DVWA Lab 📌 Overview This project demons...

DVWA Pro-test CSRF vulnerability-vulnerability warning-the black bar safety net

CSRF is a cross-site request forgery, i.e., a user at A site after login in the same client of the Site B using the vulnerability to get A site's Cookie and other authentication information, and forgery as legitimate identity request to A site. This article in the local environment, carry out the...

DVWA - Damn Vulnerable Web Application

Damn Vulnerable Web Application DVWA is a PHP/MySQL web application that is damn vulnerable. Its main goal is to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and to aid...

PHP arbitrary file upload vulnerability-vulnerability warning-the black bar safety net

Vulnerability details: This vulnerability exists in php in a very commonly used function: the moveuploadedfiles, the developer always use this function to move the uploaded file,this function will check is upload whether the file is a legitimate filewhether it is through the HTTP post mechanism t...

PHP arbitrary file upload Vulnerability, CVE-2 0 1 5-2 3 4 8-a vulnerability warning-the black bar safety net

Security researchers today published a medium-risk vulnerabilities--PHP arbitrary file upload Vulnerability, CVE-2 0 1 5-2 3 4 8 in. In the Upload File only when the determined file name is the legal name of the file to conclude that this file is not malicious file, which will indeed lead to othe...