94 matches found
nimbostratus-target
Nimbostratus target This repository holds a target infrastructure you can use for testing nimbostratus. This code deploys an Amazon AWS infrastructure which has various vulnerabilities and weak configuration settings which can be exploited using nimbostratus. If you're not sure what this is all...
detection-rules
Detection Rules Detection Rules is the home for rules used by Elastic Security. This repository is used for the development, maintenance, testing, validation, and release of rules for Elastic Security’s Detection Engine. This repository was first announced on Elastic's blog post, Elastic Security...
log4j-poc
log4j-poc An LDAP RCE exploit for CVE-2021-44228 Log4Shell Description The demo Tomcat 8 server on port 8080 has a vulnerable app log4shell deployed on it and the server also vulnerable via user-agent attacks. The remote exploit app in this demo is based on that found at...
CVE-2024-34351
CVE-2024-34351 Test-bed for CVE-2024-34351: I used the latest vulnerable version of Next.js, which is 14.1.0. Set up the environment with the following command: npm install npm run dev...
cve-2021-3007-vulnerable
CVE-2021-3007 Vulnerable Test Environment Intentionally vulnerable test environment for validating CVE-2021-3007 detection in security scanners. Vulnerability Overview Attribute| Value ---|--- CVE ID| CVE-2021-3007 Severity| Critical CVSS 9.8 Type| Insecure Deserialization → RCE Affected| Laminas...
CVE-2022-28219-Like
CVE-2022-28219-Like Build a test environment similar in concept to CVE-2022-28219...
Dubbo-CVE-2020-1948
Apache Dubbo CVE-2020-1948 Test Environment Introduction When this vulnerability first emerged, in order to verify its impact, we searched the internet for many examples compiled by others, but found none that could successfully validate it. So we created one ourselves and put it here for your...
vuln_spring_log4j2
vulnspringlog4j2 Vulnerable spring application for testing the log4j2 CVE-2021-44228 Java Version: 1.8 Spring Boot Version: 2.4.0 Spring Core Version: 5.3.1 Log4j Version: 2.13.3 Burp Log...
cve-2024-23113-test-env
CVE-2024-23113 FortiOS Test Environment A Docker-based test environment for validating CVE-2024-23113 Nuclei templates against simulated vulnerable FortiOS instances. 🔍 Overview This environment simulates vulnerable FortiOS HTTP interfaces to test the detection capabilities of CVE-2024-23113 Nucl...
CVE-2018-10933
CVE-2018-10933 CVE-2018-10933 sshlib user authentication attack - docker lab, test and exploit...
CVE-2022-23773-Reproduce
CVE-2022-23773-Reproduce Execute the demo git clone https://github.com/Liuyushung/CVE-2022-23773-Reproduce.git cd CVE-2022-23773-Reproduce/testenv/ ./execmain.sh...
CVE-2024-3400-PoC
This repo contains a script to set up the safe environment for exploitation and a script that is responsible for carrying out the exploitation stages of: CVE-2024-3400 Palo Alto Firewall Test Environment This repository provides a shell script that allows you to quickly set up a test environment...
CVE-2026-10520-10523
CVE-2026-10520, CVE-2026-10523 Ivanti Sentry ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Creat...
apche-struts-vuln-demo-cve-2018-11776
Apache Struts Vulnerability Demo CVE-2018-11776 Description Spins up an isolated test environment for experimentation with Apache Struts vulnerability CVE-2018-11776. Getting Started To bring up the test environment, run the following command: aws cloudformation create-stack \ --template-body...
log4j2_CVE-2021-44228
log4j2 Environment Test Usage, Assume Personal Responsibility for Issues My test environment is Java 17. If needed, you can modify and re-import the project yourself. After starting the environment, the address is: http://127.0.0.1:8006/test...
Faraday 5.25.0
Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use...
secbench-dvwa
DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Applicati...
OpenAI Models Breached Hugging Face During Internal Cyber Test
OpenAI models escaped from a controlled cyber test, exploited zero-day flaws and breached Hugging Face while searching its production database for test answers...
Faraday 5.20.1
Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use...