74 matches found
CVE-2018-10933
CVE-2018-10933 CVE-2018-10933 sshlib user authentication attack - docker lab, test and exploit...
CVE-2023-27372
Research Project: CVE-2023-27372 — SPIP RCE, Lab Environment + Safe PoC 1 Description This repository contains: stand/ — a lab environment vulnerable setup on Docker: SPIP + MariaDB. poc/ — a Python verification tool scanner implementing safe confirmation of the vulnerability Safe PoC without...
CVE-2025-55182-React2Shell-lab
CVE-2025-55182-React2Shell-lab CVE-2025-55182 React2Shell Research Lab docker build -t rsc-victim . ddocker run -d -p 3000:3000 --name victim rsc-victim docker logs -f victim...
cve-2025-55182-lab
CVE-2025-55182 RSC lab intentionally vulnerable Local Docker lab for authorized security research: React Server Components / Next.js App Router with a stack in the CVE-2025-55182 React2Shell affected range. Use only on your own machine. Do not expose this container to the internet. References Rea...
docker-lab-cve-2017-5638-cve-2021-41773
Attacker Lab: CVE-2017-5638 & CVE-2021-41773 A 7-host Docker-based attack emulation lab designed to demonstrate a multi-stage kill chain, lateral movement, and multi-point IDS detection. Overview This lab simulates a realistic network environment where an attacker progresses from initial...
lab-cve-2023-4863
CVE-2023-4863 — libwebp Exploitation Lab Reproduction of CVE-2023-4863 heap buffer overflow in libwebp in a fully isolated automated Docker environment. Based on the practice from the Ethical Hacking module of CEFIRE. What this lab does Spins up eight containers on a private network: Container|...
CVE-2021-44228-PoC
Self-contained lab environment PoC that runs a reverse-shell with Log4Shell CVE-2021-44228 This is a self-contained lab environment that runs the exploit safely, all from docker compose. The affected versions are Apache Log4j =2.0–2.14.1 and the CVE is tracked as CVE-2021-44228 CVSS score: 10.0. ...
apache-cve-2021-42013-lab
Apache HTTP Server 2.4.49 Path Traversal & Remote Code Execution CVE-2021-42013 About the Project In this project, I demonstrated the CVE-2021-42013 vulnerability in Apache HTTP Server version 2.4.49 in a lab environment I created using Docker. The goal is to examine how the vulnerability occurs,...
Log4shell
Log4J lab Description This is a lab for playing around with the Log4J CVE-2021-44228 Springboot app + Log4J 2.6.1 Usage docker build . -t mylog && docker run --rm -p 8081:8080 --name mylog-app mylog...
log4shell-docker-lab
Log4Shell docker lab for CVE-2021-44228 The components This docker lab makes use of three components, being: The vulnerable spring-boot application An HTTP server that hosts .class files used for remote code execution An LDAP referral server which redirects specific LDAP queries to the HTTP serve...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell Unchained Isolated adversary-emulation lab for PHP S...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-poc — Go edition A Go toolkit for CVE-2026-109618...
web-hacking-playground
Web Hacking Playground Descripción Web Hacking Playground es un entorno controlado de hacking web. Consta de vulnerabilidades encontradas en casos reales, tanto en pentests como en programas de Bug Bounty. El objetivo es que los usuarios puedan practicar con ellas, y aprender a detectarlas y...
vulnerum
Vulnerum Run the whole vulnerability lifecycle on your own...
Exploit for OS Command Injection in Php
CVE-2024-4577 — PHP-CGI Argument Injection → RCE Docker Lab /...
Exploit for Classic Buffer Overflow in Cisco Secure_Endpoint
ZendTo 6.15-8 / ClamAV exact-profile RCE and root-variant repr...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 — Exploit Development Lab Overview This pr...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 — Apache HTTP Server 2.4.49 Lab Reproduction o...