fastjson-rce-lab

Fastjson 1.2.83 RCE Lab Environment CVE-2026-16723 Disclaimer: This lab is intended solely for security research, teaching demonstrations, and defense construction in authorized environments. Testing unauthorized targets without permission may be illegal; users bear all responsibility for the...

Lab_Reportlab

LAB Reportlab This lab was set up to test CVE-2023-33733. Setup and Run Setup root@kitploit: pip3 install -r requirements.txt Run root@kitploit: python3 app.py...

CVE-2026-20896

CVE-2026-20896 Lab This repository provides a small, self-contained lab for exploring the CVE-2026-20896 issue in a controlled and authorized environment. Overview The lab includes: poc.py: my customized proof-of-concept script that demonstrates the issue and exports browser-ready cookie files...

OSCP

OSCP-Lab Linkedin V. Varbanovski...

CVE-2026-3854-lab

Flagship Lab 001: From Git Push Options to RCE A local Learning Lab and Research Lab inspired by the publicly documented vulnerability concepts behind CVE-2026-3854. Both experiences use real authenticated Git pushes against ForgeDock, a fictional Git server; the Research Lab. !CAUTION This proje...

Adaz

Adaz: Laboratorio de hunting de Active Directory en Azure Este proyecto te permite levantar fácilmente laboratorios de Active Directory en Azure con estaciones de trabajo unidas al dominio, reenvío de eventos de Windows, Kibana y Sysmon usando Terraform/Ansible. Expone un archivo de configuración...

WifiForge

WifiForge proporciona un entorno seguro y legal para aprender hacking WiFi. Basado en el proyecto de código abierto mininet-wifi, esta herramienta configura automáticamente las redes y herramientas necesarias para ejecutar una variedad de laboratorios de explotación WiFi, eliminando la necesidad ...

sheepl

sheepl Sheepl: Creación de comportamiento de usuario realista para apoyar el desarrollo de tácticas de operaciones en entornos de laboratorio Introducción Hay muchos recursos disponibles en línea sobre cómo construir entornos de red de AD para el desarrollo de tácticas de operaciones de equipo az...

DanderSpritz_lab

Laboratorio DanderSpritz Propósito El objetivo del laboratorio DanderSpritz es permitir a investigadores y defensores configurar rápidamente una versión completamente funcional de DanderSpritz - El conjunto de herramientas de post-explotación del Equation Group y un dominio Windows Server 2008 y ...

CVE-2023-30212_lab

CVE-2023-30212lab...

gpp-encrypt

gpp-encrypt Descripción Este pequeño script encripta contraseñas al cpassword de GPP. Es útil para crear laboratorios AD vulnerables. Requisitos Este paquete requiere: python3 python3 Standard Library Instalación root@kitploit: git clone "https://github.com/mauricelambert/gpp-encrypt.git" cd...

Exploit-CVE-2025-1974-Lab

Exploit-CVE-2025-1974-Lab...

CVE-2023-28121

CVE-2023-28121 Research notes and helper material for studying CVE-2023-28121 in a controlled WordPress/WooCommerce Payments lab. Safety Notice Use this material only in systems you own or have explicit authorization to test. Keep vulnerable WordPress and plugin versions inside an isolated local...

CVE-2018-7600

LAB 9-CVE-2018-7600 I. SYSTEM ANALYSIS Identify Attack Surface Start by listing the running containers: docker ps From the docker ps results, the container for this Lab is: p1/lab09:latest This container exposes port: 0.0.0.0:8011-80/tcp This indicates that the service inside the container is...

CVE-2026-21876

CVE-2026-21876 Lab Environment for CVE-2026-1357 1. Build the environment sudo apt update && sudo apt install docker.io docker-compose -y sudo systemctl start docker git clone Link of Repo sudo chmod -R 755 . sudo docker-compose up --build -d FireFox: http://localhost:8083 2. Exploit the...

CVE-2026-31431

CVE-2026-31431 Overview This repository is created for educational and research purposes only. It is intended to help understand the behavior, impact, and security considerations related to CVE-2026-31431 in a controlled lab environment. The content in this repository must only be used on systems...

CVE-2024-47176

CVE-2024-47176 — CUPS RCE Exploit Lab CyberSecurity & Virtualisation 2025-2026 Isolated lab environment to demonstrate CVE-2024-47176 CUPS Remote Code Execution via cups-browsed. Setup Required VDIs Ubuntu 22.04 NOT 24.04! — https://www.osboxes.org/ubuntu/ → VirtualBox VDI Kali Linux 2026.1 —...

CVE-2023-46604-LAB

CVE-2023-46604 – Apache ActiveMQ RCE OpenWire Protocol This repository documents a lab environment used to understand and detect the CVE-2023-46604 vulnerability affecting Apache ActiveMQ. The goal of this project: Understand how the exploit behaves at the protocol level Capture malicious OpenWir...

zerologon-lab

zerologon-lab Scripts para un entorno de laboratorio que demuestra la vulnerabilidad Zerologon CVE-2020-1472. Uso zerologon.py root@kitploit: zerologon.py -h --reset --restore HEX dcname dcip Intenta explotar la vulnerabilidad Zerologon contra un Controlador de Dominio. Argumentos: dcname: El...

CVE-2023-46604

CVE-2023-46604 By Ruben Fobe & Klaas Stessens Intro WARNING This project is intended for educational and lab purposes only. Only use these techniques in environments you own or are authorized to test. This lab will simulate the exploitation of CVE-2023-46604, by using a Kali Linux VM attacker and...