CVE-2021-41773

CVE-2021-41773 Mettre en place un environnement vulnérable...

GOAD

GOAD v3 🔖 التوثيق : https://orange-cyberdefense.github.io/GOAD/ الوصف GOAD هو مشروع مختبر لاختبار اختراق الدليل النشط Active Directory. الغرض من هذا المختبر هو تزويد مختبري الاختراق ببيئة دليل نشط ضعيفة وجاهزة للاستخدام لممارسة تقنيات الهجوم المعتادة. !CAUTION هذا المختبر شديد الضعف، لا تعِد...

cve-2018-9208

CVE-2018-9208 यह Cved का हिस्सा है: कमजोर डॉकर कंटेनरों को प्रबंधित करने का एक उपकरण। Cved: https://github.com/git-rep-src/cved इमेज स्रोत: https://github.com/cved-sources/cve-2018-9208 इमेज लेखक: https://github.com/lcashdol/Exploits/tree/master/CVE-2018-9208...

base-lamp

BASE-LAMP هذا جزء من Cved: أداة لإدارة حاويات docker القابلة للاختراق. Cved: https://github.com/git-rep-src/cved مصدر الصورة: https://github.com/cved-sources/base-lamp الصورة مبنية على: https://github.com/Medicean/VulApps/tree/master/base/lamp...

cicd-goat

Deliberately vulnerable CI/CD environment. Hack CI/CD pipelines, capture the flags. 🚩 Created by Cider Security Acquired by Palo Alto Networks. Table of Contents...

Exploit for Incorrect Authorization in Cacti

SHELL-POC-CVE-2022-46169 A bash proof of concept of t...

Exploit for Deserialization of Untrusted Data in Apache Tomcat

CVE-2025-24813 Proof of Concept PoC script for CVE-2025-2481...

Exploit for CVE-2024-27448

MailDev 2.1.0 RCE Exploit CVE-2024-27448 MailDev 2 throu...

Exploit for Server-Side Request Forgery in Lobehub Lobe_Chat

CVE-2024-47066 ★ CVE-2024-47066 LobeChat SSRF PoC ★ Descr...

Exploit for Missing Authorization in Sonaar Mp3_Audio_Player_For_Music\,_Radio_\&_Podcast

CVE-2024-7856 ★ CVE-2024-7856 Arbitrary File deletion PoC ★...

Exploit for Cross-Site Request Forgery (CSRF) in Concretecms Concrete_Cms

CVE-2017-5638 Apache Struts 2 RCE Proof of Concept This repos...

Exploit for Improper Access Control in Joomla Joomla\!

Joomla-CVE-2023-23752 This Python implementation serves an edu...

CVE-2023-38035

A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration. Recent assessments: jheysel-r7 at...

vulhub

It is an open-source collection of pre-built vulnerable docker environments. The primary vulnerability is a Server-Side Template Injection SSTI vulnerability in a Flask application. The repository contains a Docker Compose file that sets up a vulnerable environment for testing and demonstration...

Dockerfiles

This repository is a collection of Dockerfiles for CTF Capture The Flag challenges running on SniperOJ. The Dockerfiles are used to build a vulnerable environment for the challenges, which can be solved by participants. The repository contains various challenges, including web-based and pwn...

Exploit for Improper Input Validation in Redhat Openshift

This is a pre-built vulnerable environment based on Docker-Compose, maintained by Vulhub. The repository contains a collection of vulnerable environments for testing and training purposes. The environments are designed to be easy to use and require no prior knowledge of Docker. The repository...

vulhub

It is an open-source collection of pre-built vulnerable docker environments. The primary vulnerability is a Flask SSTI Server-Side Template Injection vulnerability. The target product/service is Flask, a Python web framework. The vulnerability class/vector is SSTI. The probable entry point is the...

CORS-Vulnerable-Lab: with COSR configuration error related to the vulnerability code range-vulnerability warning-the black bar safety net

This repository contains the CORS configuration error related to the vulnerable code. You can be on the local machine to configure the vulnerable code, and to the actual use of the CORS related error configuration issue. In this case, I would first like to thank@albinowax, the AKReddy, And Vivek...

ncu-ad-course-2017-pwn

This repository is an offensive tool for a Capture The Flag CTF challenge. It contains a series of pwn tasks created by the author for the NCU A&D course. The tasks are designed to test the participants' skills in exploiting vulnerabilities and bypassing security measures. The repository includes...

Exploit for Improper Input Validation in Redhat Openshift

This is a pre-built vulnerable environment based on Docker-Compose, provided by the Vulhub project. The project is designed to help users learn about vulnerabilities and improve their defensive skills. The repository contains a collection of vulnerable environments, each with its own Docker-Compo...