100_days_of_kql_2026

100 Days of KQL 2026 Inititave Requirements: Create a GitHub account Create a repo called 100daysofkql Example: https://github.com/m4nbat/100daysofkql2026 Create a readme.md and add this line to your readme: 100DaysOfKQL2026 Master repo with instructions: https://github.com/m4nbat/100daysofkql202...

shellshock-victim-host

shellshock-victim-host A docker container vulnerable to Shellshock - CVE-2014-6271 Run podman build -t shellshock-victim . podman run -it -p 80:8080 shellshock-victim Note: Builds with docker as well. The vulnerable app will be deployed on : http://localhost:8080/victim.cgi - Vulnerable endpoint...

DedSec

DedSec Project Official Website DedSec Project Cross-platform build note: This copy includes support for Ubuntu, Kali Linux, Linux Mint, and Termux. Run bash Setup.sh, then use ./Run.sh. See CROSSPLATFORM.md for platform-specific behavior and limitations. Για να μεταβείτε στην πλήρη Ελληνική...

bluekeep_metasploit_practice

bluekeepmetasploitpractice Exploiting bluekeep CVE-2019-0708 on windows 7 using metasplotable...

cmdchamp

cmdchamp Bash CLI trainer — 30 levels from ls to privilege escalation. Every question asks you to type a real command — get instant feedback, move on. Miss one and it doesn't just show you the answer: it shows what YOUR command printed against what was wanted, and for a pipeline the line count at...

dockle

Dockle - 보안을 위한 컨테이너 이미지 린터, 모범 사례 Docker 이미지 구축 지원, 쉽게 시작하기 Dockle은 다음을 도와줍니다: 1. 모범 사례 Docker 이미지 구축 2. 안전한 Docker 이미지 구축 검사 항목에는 CIS Benchmarks가 포함됩니다bash $ brew untap goodwithtech/dockle who use 0.1.16 or older version $ brew install goodwithtech/r/dockle $ dockle YOURIMAGENAME 참조: 설치 및 일반적인 ...

LKWA

LKWA Lesser Known Web Attack Lab is for intermediate pentester that can test and practice lesser known web attacks such as Object Injection, XSSI, PHAR Deserialization, variables variable ..etc. Write-ups are welcome. My own walk-through is here . Installation - Local Just clone the git with git...

WannaRace

🚀 WannaRace WebApp intentionally made vulnerable to Race Condition 🤖 Description Race Condition vulnerability can be practiced in the developed WebApp. Task is to buy a Mega Box using race condition that costs more than available vouchers. Two challenges are made for practice. Challenge B is to b...

Burp_VulPscan

BurpVulPscan burp passive scanning plugin, currently only CVE-2022-22947 Plan to integrate various collected high-threat PoCs together and add them in. A practice project for learning Java...

BadBlood

BadBlood BadBlood by Secframe fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an...

BadBlood

BadBlood Secframe の BadBlood は、Microsoft Active Directory ドメインに構造と数千のオブジェクトを投入します。このツールの出力は、現実世界のドメインに類似したドメインです。BadBlood をドメインで実行すると、セキュリティアナリストやエンジニアはツールを使って理解を深め、Active Directory のセキュリティ保護を実践する練習ができます。このツールは実行するたびに異なる結果を生成します。ドメイン、ユーザー、グループ、コンピューター、権限はすべて毎回異なります。 完全なユーザーガイドと情報 コマンド NONE:...

vuln-bank-mobile

💳 Vulnerable Bank 모바일 앱 Vulnerable Bank 는 보안 엔지니어, 침투 테스터, 모바일 앱 보안 학습자를 위해 제작된 의도적으로 취약한 모바일 애플리케이션으로, 안전하지 않은 코딩 관행의 실제 공격을 연습하고 시연할 수 있도록 설계되었습니다. 이 모바일 앱은 일반적인 은행 기능을 갖춘 의도적으로 취약한 웹 API인 Vulnerable Bank API의 프론트엔드 역할을 합니다. 📥 즉시 다운로드 및 실행 권장 🆕 이제 컴파일된 .apk를 GitHub Releases에서 직접 다운로드할 수 있습니다. 📦...

web-hacking-playground

Web Hacking Playground 설명 Web Hacking Playground는 통제된 웹 해킹 환경입니다. 모의 침투 테스트와 버그 바운티 프로그램에서 발견된 실제 사례의 취약점들로 구성되어 있습니다. 목표는 사용자들이 이 취약점들을 연습하고, 탐지 및 익스플로잇 방법을 배우는 것입니다. 또한 다음과 같은 관심 주제들도 다룰 것입니다: 맞춤형 페이로드를 생성하여 필터 우회, 여러 취약점을 연계한 공격 실행, 개념 증명 스크립트 개발 등이 있습니다. 중요사항 애플리케이션 소스 코드는 공개되어 있습니다. 하지만 랩의 접...

vulnmachines

안녕하세요 👋 Vulnmachines는 보안 애호가들이 Capture The Flag 대회를 통해 다양한 사이버보안 분야의 여러 기술을 직접 실습해 볼 수 있는 사이버보안 학습 플랫폼입니다. 저희 플랫폼을 확인해 보세요 Vulnmachines.com 저희 YouTube 채널 Vulnmachines 저희를 팔로우하세요 YouTube Twitter Facebook LinkedIn...

awesome-cyber-skills

🛡️ awesome-cyber-skills A curated list of hacking environments where you can train your cyber skills free, legally and safely. 👋 Welcome Welcome to awesome-cyber-skills — your one-stop library for free, legal, and safe places to train your cybersecurity skills. 📑 Table of Contents 📖 About the List...

DEV-CVE-2021-4034

DEV-CVE-2021-4034 DEV의 CVE-2021-4034 취약점 실습을 위한 저장소입니다. 오직 학술 목적으로만 제작되었습니다...

Project-01-Cybersecurity-Home-Lab

Project 1 — Cybersecurity Home Lab Project Overview This...

secbench-dvwa

DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Applicati...

CVE-2026-82181

Medical Practice Management System developed by Le-yan has a Sensitive Data in URL vulnerability. Unauthenticated remote attackers can obtain sensitive information via victim's browser history or log files...

CVE-2026-82181 Le-yan｜Medical Practice Management System - Sensitive Data in URL

Medical Practice Management System developed by Le-yan has a Sensitive Data in URL vulnerability. Unauthenticated remote attackers can obtain sensitive information via victim's browser history or log files...