BlueTeam.Lab

BlueTeam.Lab Purpose This project contains a set of Terraform and Ansible scripts to create an orchestrated BlueTeam Lab. The goal of this project is to provide the red and blue teams with the ability to deploy an ad-hoc detection lab to test various attacks and forensic artifacts on the latest...

DetectionLabELK

DetectionLabELK DetectionLabELK is a fork from Chris Long's DetectionLab with ELK stack instead of Splunk. Description: DetectionLabELK is the perfect lab to use if you would like to build effective detection capabilities. It has been designed with defenders in mind. Its primary purpose is to all...

Apache-Tomcat-CVE-2025-24813-Lab

CVE-2025-24813: Apache Tomcat Detection & Mitigation Lab A defensive cybersecurity portfolio project demonstrating vulnerability research, detection engineering, log correlation, layered mitigation, and technical documentation in an isolated two-VM environment. Project summary This repository...

printnightmare-detection-lab

PrintNightmare 威胁检测与应急响应实验室 CVE-2021-34527 📌 概述 本项目记录了一个针对 PrintNightmare CVE-2021-34527 的端到端安全监控、检测工程与应急响应实施方案。PrintNightmare 是 Windows 打印后台处理程序服务 spoolsv.exe 中的一个严重漏洞，允许未认证的远程代码执行 RCE 以及本地权限提升 LPE 至 SYSTEM 权限。 本实验室的目标是模拟利用遥测数据，通过 Sysmon 和 Windows 安全事件日志 捕获内核与系统审计日志，将事件摄入 Splunk Enterprise SIEM...

Exploit for SQL Injection in Progress Moveit_Cloud

CVE-2023-34362 MOVEit Transfer Vulnerability Analysis Proj...

Exploit for OS Command Injection in Php

CVE-2024-4577 - PHP CGI Argument Injection Detection Lab A co...