CVE-2026-6875

CVE-2026-6875 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python ...

CVE-2018-10933

CVE-2018-10933 CVE-2018-10933 sshlib user authentication attack - docker lab, test and exploit...

CVE-2023-7028-Docker

CVE-2023-7028 with Docker 🎯 Want to practice with the new gitlab CVE ? Follow the instructions Build the lab 1. Install Docker : https://docs.docker.com/get-docker/ 2. Clone the project : git clone https://github.com/Trackflaw/CVE-2023-7028-Docker.git. 3. Go to the project : cd CVE-2023-7028-Dock...

CVE-2026-31431

CVE-2026-31431 Overview This repository is created for educational and research purposes only. It is intended to help understand the behavior, impact, and security considerations related to CVE-2026-31431 in a controlled lab environment. The content in this repository must only be used on systems...

siem-threat-detection-lab

🛡️ SIEM + Threat Detection Lab An end-to-end blue-team lab: a Wazuh 4.7.5 SIEM detecting 7 simulated attacks — from port scanning and SSH brute force to a real CVE exploit Slowloris DoS — with every event logged, alerted, and mapped to MITRE ATT &CK in real time. Built from scratch on two virtual...

dod-blue-team-network-lab

DoD Blue Team Network Security & Hardening Lab Executive Summary High fidelity defensive security lab simulating a DoD aligned enterprise network. This project demonstrates structured network segmentation, system hardening, centralized telemetry ingestion, detection engineering, adversary...

CVE-2021-42013-LAB

CVE-2021-42013-LAB Apache HTTP Server 2.4.50 - RCE Lab exploit.sh :- https://github.com/jas9reet/CVE-2021-42013-LAB/blob/main/exploit.sh Usage docker pull jas9reet/cve-2021-42013-lab docker run -dit -p 8088:80 jas9reet/cve-2021-42013-lab Vulnerable Application Access VICTIM-IP-ADDRESS :8088...

DefCon25

Lab Setup 1. x2 VM's = Win7 x64 & Win10RS1/2 x64 2. Extract "DefCon-Tool.zip" to the root of the C drive 3. Follow slides and Lab-Writeup.txt...

Expression-Sandbox-Escape-Simulation-Lab

🧪 Expression Sandbox Escape – Simulation Lab A minimal experimental environment for demonstrating JavaScript expression sandbox escape and patch evolution. Through multiple versions of the sandbox, it implements the progression from: Fully escapable → patching this → then patching destructuring...

wazuh-home-soc

Home SOC: Threat Detection Lab with Wazuh + Suricata A self-hosted Security Operations Center lab built to detect real attack techniques against a deliberately vulnerable target, using Wazuh as the SIEM and Suricata as a network-based IDS sensor. Built to demonstrate detection engineering skills ...

SQL-ThinkPHP-5.0.24-RCE-

SQL-ThinkPHP-5.0.24-RCE- SQL注入漏洞复现报告——OWASP靶场实战，通过UNION注入提取数据库29条用户凭证 ThinkPHP 5.0.24 RCE漏洞复现报告——CVE-2018-16385，验证代码执行能力...

aws-pentesting-lab

AWS Pen-Testing Laboratory PenTesting laboratory deployed as IaC with Terraform on AWS. It deploys a Kali Linux instance accessible via ssh & wireguard VPN. Vulnerable instances in a private subnet. NOTE: Ids only defined for region "eu-west-1" For other regions, kali ami id must be specified and...

CVE-2024-47176

CVE-2024-47176 — CUPS RCE Exploit Lab CyberSecurity & Virtualisation 2025-2026 Isolated lab environment to demonstrate CVE-2024-47176 CUPS Remote Code Execution via cups-browsed. Setup Required VDIs Ubuntu 22.04 NOT 24.04! — https://www.osboxes.org/ubuntu/ → VirtualBox VDI Kali Linux 2026.1 —...

cve-2025-24054-lab

CVE-2025-24054 — Detection & Mitigation Lab Project log for a defensive security lab on CVE-2025-24054 , the Windows New Technology LAN Manager NTLM Hash Disclosure Spoofing vulnerability, under the assumption that the affected system cannot be patched short-term. Blue-team educational project...

activemq-cve-2023-46604-lab

This repository does not have a README...

CVE-2026-59310

CVE-2026-59310 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...

CVE-2021-41773-Exploit-Lab

CVE-2021-41773 — Exploit Development Lab Overview This project documents the research, reproduction, and Proof-of-Concept PoC development for CVE-2021-41773, a Path Traversal vulnerability affecting Apache HTTP Server 2.4.49. The vulnerability was reproduced in an isolated Docker laboratory...

CVE-2024-51430

CVE-2024-51430 Vulnerability Type Cross-Site Scripting XSS Description Cross Site Scripting vulnerability in online diagnostic lab management system using php v.1.0 allows a remote attacker to execute arbitrary code via the Test Name parameter on the diagnostic/add-test.php component Vendor of...

apache-cve-2021-42013-rce

apache-cve-2021-42013-rce Docker-based penetration testing lab simulating CVE-2021-42013 vulnerability Path Traversal & RCE on Apache HTTP Server 2.4.49. This project is prepared to simulate and exploit the CVE-2021-42013 vulnerability found in Apache HTTP Server 2.4.49 in an isolated environment...

CVE-2026-18963_analyst

Open Source Identity and Access Management Add authentication to applications and secure services with minimum effort. No need to deal with storing users or authenticating users. Keycloak provides user federation, strong authentication, user management, fine-grained authorization, and more. Help...