86 matches found
CVE-2022-23773-Reproduce
CVE-2022-23773-复现 执行演示 root@kitploit: git clone https://github.com/Liuyushung/CVE-2022-23773-Reproduce.git cd CVE-2022-23773-Reproduce/testenv/ ./execmain.sh...
CVE-2022-28219-Like
CVE-2022-28219-Like 建立一個概念類似 CVE-2022-28219 的測試環境...
CVE-2024-34351
CVE-2024-34351 CVE-2024-34351的测试床：我使用了最新的存在漏洞的Next.js版本，即14.1.0。使用以下命令设置环境： root@kitploit: npm install npm run dev...
nimbostratus-target
Nimbostratus target Este repositorio contiene una infraestructura objetivo que puedes usar para probar nimbostratus. Este código despliega una infraestructura de Amazon AWS que tiene varias vulnerabilidades y configuraciones débiles que pueden explotarse usando nimbostratus. Si no estás seguro de...
detection-rules
Detection Rules Detection Rules is the home for rules used by Elastic Security. This repository is used for the development, maintenance, testing, validation, and release of rules for Elastic Security’s Detection Engine. This repository was first announced on Elastic's blog post, Elastic Security...
log4jtest
简介 本仓库旨在利用 Docker 和 Hashicorp Terraform 快速测试 log4j 漏洞。该测试的所有组件都将运行在 Docker 网络中的 Docker 容器内，可通过 'host.docker.internal' 进行访问。 致谢 / 免责声明 该测试环境源自 Raxis 的一篇优秀博客文章：https://raxis.com/blog/log4j-exploit 易受攻击的应用程序和漏洞利用代码来自 cyberxml https://github.com/cyberxml/log4j-poc。 我所做的只是将环境代码化，使其易于快速启动并测试这个令人垂涎的漏洞。...
Dubbo-CVE-2020-1948
Apache Dubbo CVE-2020-1948 测试环境 引子 在这个漏洞出现之初，为了验证该漏洞的危害，我们从互联网上搜寻了很多人整理的例子，发现没有一个能够顺利验证该漏洞，故自己搞了一个，放在这里供大家参考，欢迎交流！ 本环境基于 Apache Dubbo 官方示例环境改造而来，纠正了官方示例程序中几处编译中报错问题。例如： 官方示例代码中应用的 DubboService 类，实际应该 Service。 编译 root@kitploit: cd src mvn package 编译成功后会在 src/target 目录生成 dubbo.jar 文件。 运行...
CVE-2018-10933
CVE-2018-10933 CVE-2018-10933 sshlib user authentication attack - docker lab, test and exploit...
vuln_spring_log4j2
vulnspringlog4j2 用于测试log4j2漏洞的Spring应用程序（CVE-2021-44228） Java版本： 1.8 Spring Boot版本： 2.4.0 Spring Core版本： 5.3.1 Log4j版本： 2.13.3 Burp 日志...
cve-2021-3007-vulnerable
CVE-2021-3007 漏洞测试环境 用于验证安全扫描器中 CVE-2021-3007 检测的故意存在漏洞的测试环境。 漏洞概述 属性| 值 ---|--- CVE ID| CVE-2021-3007 严重性| 严重（CVSS 9.8） 类型| 不安全的反序列化 → 远程代码执行 影响版本| Laminas HTTP 2.14.2, Zend Framework 3.0.0 CWE| CWE-502（不可信数据反序列化） 快速开始 root@kitploit: Clone repository git clone...
CVE-2026-10520-10523
CVE-2026-10520, CVE-2026-10523 Ivanti Sentry ⚡ 简单用法 仅在安全且授权的环境中使用此项目，例如： 本地虚拟机 Docker 容器 隔离的实验环境 授权的渗透测试环境 示例设置： root@kitploit: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activate...
log4j2_CVE-2021-44228
log4j2环境测试使用，如出现问题个人承担 我测试环境是java17，如需要自己更改重新导入项目就可以了 启动环境之后得地址：http://127.0.0.1:8006/test...
CVE-2024-3400-PoC
Este repositorio contiene un script para configurar el entorno seguro para la explotación y un script encargado de llevar a cabo las etapas de explotación de: CVE-2024-3400 Entorno de prueba para Palo Alto Firewall Este repositorio proporciona un script de shell que permite configurar rápidamente...
apche-struts-vuln-demo-cve-2018-11776
Demo della vulnerabilità Apache Struts CVE-2018-11776 Descrizione Crea un ambiente di test isolato per sperimentare la vulnerabilità Apache Struts CVE-2018-11776. Per iniziare Per avviare l'ambiente di test, esegui il seguente comando: root@kitploit: aws cloudformation create-stack ...
cve-2024-23113-test-env
CVE-2024-23113 Ambiente di Test FortiOS Un ambiente di test basato su Docker per validare i template Nuclei di CVE-2024-23113 contro istanze FortiOS vulnerabili simulate. 🔍 Panoramica Questo ambiente simula interfacce HTTP FortiOS vulnerabili per testare le capacità di rilevamento dei template...
OpenAI Models Breached Hugging Face During Internal Cyber Test
OpenAI models escaped from a controlled cyber test, exploited zero-day flaws and breached Hugging Face while searching its production database for test answers...
Faraday 5.20.1
Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use...
[SECURITY] Fedora 43 Update: python3.9-3.9.25-9.fc43
Python 3.9 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.9, see other distributions that support it, such as CentOS or RHEL or older Fedo...
Faraday 5.20.0
Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use...
