14 matches found
CVE-2025-1974
cve-2025-1974-win11-attack-defense-lab Windows 11-first educational repository for studying CVE-2025-1974 in a safe, non-weaponized ATTACK + DEFENSE lab. The project is designed for university coursework, team demos, and report-ready screenshots. It emphasizes clean-room implementation, local-onl...
TIWAP
Proyecto de Aplicación Web Totalmente Insegura TIWAP TIWAP es un laboratorio de pruebas de seguridad web creado con Flask para entusiastas de la seguridad en ciernes que desean aprender sobre diversas vulnerabilidades web. Inspirado en DVWA, los contribuyentes han hecho todo lo posible por recrea...
vuln-chain-lab
File Upload Bypass + Stored XSS PoC Lab A deliberately vulnerable web application demonstrating how a file upload bypass chains with stored XSS to create backdoor admin accounts, even when CSP, CORS, and CSRF protections are in place. Full Blog Post: KurtiseBear Blog This is an educational lab fo...
CVE-2025-55182_Vulnerable-Application
CVE-2025-55182 Vulnerable Lab Educational testing lab using vulnerable React Server Components to demonstrate security vulnerabilities in modern web frameworks. ⚠️ Important Disclaimer This application is intentionally vulnerable and should ONLY be used for educational purposes in controlled...
day01-sessionreaper-lab
Day 1 — SessionReaper-style Vulnerable Lab Educational This is a tiny lab that simulates the core idea reported for CVE-2025-54236 “SessionReaper”: improper validation of nested JSON leading to dangerous code paths. This is not Magento/Adobe Commerce; it's a minimal educational replica to practic...
day10-nextjs-middleware-lab
Día 10 — Laboratorio de omisión de autenticación middleware de Next.js simulación CVE-2025-29927 Importante: Solo laboratorio educativo. Ejecutar localmente en Docker. Inicio rápido: root@kitploit: npm i build from repo root with files above docker build -t day10-nextjs-lab . run docker run --rm ...
Exploit for Improper Input Validation in Drupal
CVE-2018-7600 Drupalgeddon2 — Red Team Project ITSOLERA...
Exploit for CVE-2026-60137
wp2shell-lab Educational PoC and lab for CVE-2026-63030 + C...
Exploit for Uncontrolled Resource Consumption in Siemens Simatic_S7-1500_Cpu_1518F-4_Pn\/Dp_Mfp_Firmware
CVE-2023-44487 — HTTP/2 Rapid Reset Test Lab Educational envi...
Exploit for CVE-2025-1974
cve-2025-1974-win11-attack-defense-lab Windows 11-first educa...
Exploit for Off-by-one Error in Sudo_Project Sudo
CVE-2021-3156 — "Baron Samedit" Lab & Exploit This repository...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Toolkit & Lab Educational Only Lightweight G...