nimbostratus-target

Nimbostratus target This repository holds a target infrastructure you can use for testing nimbostratus. This code deploys an Amazon AWS infrastructure which has various vulnerabilities and weak configuration settings which can be exploited using nimbostratus. If you're not sure what this is all...

log4jtest

Introduction This repository is setup to quickly test the log4j vulnerability using Docker and Hashicorp Terraform. All of the components of this test will run in Docker containers on the Docker network, accessible via 'host.docker.internal'. Credits / Disclaimer This test environment is derived...

detection-rules

Detection Rules Detection Rules is the home for rules used by Elastic Security. This repository is used for the development, maintenance, testing, validation, and release of rules for Elastic Security’s Detection Engine. This repository was first announced on Elastic's blog post, Elastic Security...

cve-2024-23113-test-env

CVE-2024-23113 Entorno de Prueba para FortiOS Un entorno de prueba basado en Docker para validar plantillas Nuclei de CVE-2024-23113 contra instancias simuladas vulnerables de FortiOS. 🔍 Descripción general Este entorno simula interfaces HTTP vulnerables de FortiOS para probar las capacidades de...

cve-2021-3007-vulnerable

CVE-2021-3007 Vulnerable Test Environment Intentionally vulnerable test environment for validating CVE-2021-3007 detection in security scanners. Vulnerability Overview Attribute| Value ---|--- CVE ID| CVE-2021-3007 Severity| Critical CVSS 9.8 Type| Insecure Deserialization → RCE Affected| Laminas...

Dubbo-CVE-2020-1948

Apache Dubbo CVE-2020-1948 Test Environment Introduction When this vulnerability first emerged, in order to verify its impact, we searched the internet for many examples compiled by others, but found none that could successfully validate it. So we created one ourselves and put it here for your...

vuln_spring_log4j2

vulnspringlog4j2 Vulnerable spring application for testing the log4j2 CVE-2021-44228 Java Version: 1.8 Spring Boot Version: 2.4.0 Spring Core Version: 5.3.1 Log4j Version: 2.13.3 Burp Log...

CVE-2024-34351

CVE-2024-34351 Test-bed for CVE-2024-34351: I used the latest vulnerable version of Next.js, which is 14.1.0. Set up the environment with the following command: npm install npm run dev...

CVE-2018-10933

CVE-2018-10933 CVE-2018-10933 sshlib user authentication attack - docker lab, test and exploit...

CVE-2022-23773-Reproduce

CVE-2022-23773-Reproduce Execute the demo git clone https://github.com/Liuyushung/CVE-2022-23773-Reproduce.git cd CVE-2022-23773-Reproduce/testenv/ ./execmain.sh...

CVE-2022-28219-Like

CVE-2022-28219-Like Crear un entorno de prueba con un concepto similar a CVE-2022-28219...

CVE-2024-3400-PoC

This repo contains a script to set up the safe environment for exploitation and a script that is responsible for carrying out the exploitation stages of: CVE-2024-3400 Palo Alto Firewall Test Environment This repository provides a shell script that allows you to quickly set up a test environment...

CVE-2026-10520-10523

CVE-2026-10520, CVE-2026-10523 Ivanti Sentry ⚡ 간단한 사용법 이 프로젝트는 다음과 같은 안전하고 승인된 환경에서만 사용하세요: 로컬 가상 머신 Docker 컨테이너 격리된 실습 환경 승인된 침투 테스트 환경 예시 설정: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source...

apche-struts-vuln-demo-cve-2018-11776

Demostración de Vulnerabilidad Apache Struts CVE-2018-11776 Descripción Crea un entorno de prueba aislado para experimentar con la vulnerabilidad CVE-2018-11776 de Apache Struts. Comenzando Para iniciar el entorno de prueba, ejecute el siguiente comando: aws cloudformation create-stack ...

log4j2_CVE-2021-44228

log4j2 Environment Test Usage, Assume Personal Responsibility for Issues My test environment is Java 17. If needed, you can modify and re-import the project yourself. After starting the environment, the address is: http://127.0.0.1:8006/test...

secbench-dvwa

DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Applicati...

OpenAI Models Breached Hugging Face During Internal Cyber Test

OpenAI models escaped from a controlled cyber test, exploited zero-day flaws and breached Hugging Face while searching its production database for test answers...

Faraday 5.20.1

Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use...

[SECURITY] Fedora 43 Update: python3.9-3.9.25-9.fc43

Python 3.9 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.9, see other distributions that support it, such as CentOS or RHEL or older Fedo...

Faraday 5.20.0

Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use...