web-hacking-playground

Web Hacking Playground Description Web Hacking Playground is a controlled web hacking environment. It consists of vulnerabilities found in real cases, both in pentests and in Bug Bounty programs. The objective is that users can practice with them, and learn to detect and exploit them. Other topic...

CVE-2024-23897

CVE-2024-23897 环境搭建 1. 安装 Java sudo apt update sudo apt install openjdk-11-jdk -y 2. 下载 Jenkins WAR 文件 wget https://get.jenkins.io/war/2.441/jenkins.war 3. 更改默认 Java 版本 - 选择 Java 11 sudo update-alternatives --config java 4. 检查版本 - 确认 openjdk version "11.x.x" java -version 5. 运行 Jenkins java...

hackerEnv

連絡先: hackerEnv...

CVE-2024-22243-CVE-2024-22234

env of CVE-2024-22243&CVE-2024-22234 detail: https://www.cnblogs.com/9eek/p/18037571...

AV-EDR-Lab-Environment-Setup

AV/EDR 实验室环境搭建 最初取自 Maldev Academy Discord，并添加了更多资源。 Notion 笔记：https://an0nud4y.notion.site/AV-EDR-Lab-Env-Setup-130bc870022d8071935cc682d3eb34b9?pvs=4 可用于模拟付费 EDR 所具备的某些功能的示例： SACL - sysmon https://detect.fyi/sysmon-a-viable-alternative-to-edr-44d4fbe5735a?gi=eb4475ea6b3d...

CVE-2024-4577

CVE-2024-4577 環境構築ファイルおよびPHPファイル --poc-- Invoke-WebRequest -Method POST -Headers @"Content-Type" = "application/x-www-form-urlencoded" -Body "" -Uri "http://localhost/test.php?%ADd+allowurlinclude%3D1+%ADd+autoprepend file%3Dphp://input"...

PMD

实战恶意软件开发 练习 1 - 环境搭建 1. 在虚拟机管理程序中设置一台 Windows 虚拟机。 a. 确保对基础安装创建快照。 2. 下载并安装 Visual Studio 2022 - https://visualstudio.microsoft.com/vs/ a. 安装时选择 Desktop development with C++ 工作负载 3. 下载并安装： DebugView++ - https://github.com/CobaltFusion/DebugViewPP PE Bear - https://github.com/hasherezade/pe-bear...

Vulnerability-Wiki-PoC

💠 Vulnerability-Wiki-PoC 🚀 Focused on practical applicati...

Malicious code in cipherflow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281ede3c5b3181c2df22a4b32a01453a51ac389a1dfe8bde69d53821cbaf20d4 cipherflow advertises itself as a zero-dependency pure-Python AES/DES library, but cipherflow/environ.py contains a multi-layer-obfuscated payload th...

RISC-V-In-Proactive-computer-Security-PCS

Exploring RISC-V in Proactive Computer Security PCS PUK pro...

RISC-V-In-Proactive-computer-Security-PCS-

Exploring RISC-V in Proactive Computer Security PCS PUK pro...

Exploit for Classic Buffer Overflow in Freefloat Freefloat_Ftp_Server

CVE-2025-5548 Security research and reprod...

Exploit for Path Traversal in Jenkins

CVE-2024-23897 환경 구축 1. Java 설치 sudo apt update sudo apt ins...

Creation of Temporary File With Insecure Permissions

Overview Affected versions of this package are vulnerable to Creation of Temporary File With Insecure Permissions in the getorcreatetmpdir function in fileutils.py. This enables an attacker who can write to /tmp to cause the execution of arbitrary .py files during environment setup. Remediation...

Exploit for CVE-2025-30208

CVE-2025-30208 & CVE-2025-31125 & CVE-2025-31486 1. Overvie...

Exploit for Path Traversal in Lfprojects Mlflow

MLflow CVE-2023-1177 - PoC & Reproduce Repo này chứa mã khai...

Exploit for CVE-2025-31486

CVE-2025-31486-PoC.py url !imagehttps://github.co...

Exploit for Deserialization of Untrusted Data in Apache Tomcat

利用条件 + DefaultServlet 写入功能启用：需在 web.xml 中配置 readonly=false...

Exploit for CVE-2024-9926

wordpress-jetpack-broken-access-control-vulnerable-application...

CVE-2024-39934

Robotmk before 2.0.1 allows a local user to escalate privileges e.g., to SYSTEM if automated Python environment setup is enabled, because the "shared holotree usage" feature allows any user to edit any Python environment...