74 matches found
lab-cve-2023-4863
CVE-2023-4863 — libwebp Exploitation Lab Reproduction of CVE-2023-4863 heap buffer overflow in libwebp in a fully isolated automated Docker environment. Based on the practice from the Ethical Hacking module of CEFIRE. What this lab does Spins up eight containers on a private network: Container|...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell Unchained Isolated adversary-emulation lab for PHP S...
apache-cve-2021-42013-lab
Apache HTTP Server 2.4.49 Path Traversal & Remote Code Execution CVE-2021-42013 About the Project In this project, I demonstrated the CVE-2021-42013 vulnerability in Apache HTTP Server version 2.4.49 in a lab environment I created using Docker. The goal is to examine how the vulnerability occurs,...
CVE-2018-10933
CVE-2018-10933 CVE-2018-10933 sshlib user authentication attack - docker lab, test and exploit...
HTTP-2-RapidReset-CVE-2023-44487-Testlab
This repo is the source code of my docker lab, made for my thesis research...
CVE-2017-5638-Attack-and-Defense
Apache Struts2 S2-045 Defense & Exploitation Lab A Docker-based security lab demonstrating both exploitation and defense against the Apache Struts2 S2-045 vulnerability CVE-2017-5638. This lab includes: 1. Vulnerable Application : Struts 2.3.31 vulnerable to S2-045 for exploitation demonstration ...
webmin_docker_and_exp
Docker-webmin-RCE-lab 1. Dockerfiles for CVE-2019-15107webmin RCE recurrence including v1.890 and v1.920. 2. Exp for each version. Build the image First, clone the files Then cd webmin1.890/1.920docker docker build -t hachp1/webmin . Running the container docker run -d -p 10000:10000 hachp1/webmi...
CVE-2023-7028-Docker
CVE-2023-7028 with Docker 🎯 Want to practice with the new gitlab CVE ? Follow the instructions Build the lab 1. Install Docker : https://docs.docker.com/get-docker/ 2. Clone the project : git clone https://github.com/Trackflaw/CVE-2023-7028-Docker.git. 3. Go to the project : cd CVE-2023-7028-Dock...
React2Shell
React2Shell CVE-2025-55182 Scanner & Exploit Toolkit for Next.js/React Server Components RCE. Repository Structure React2Shell/ ├── browser-extension/ Chrome extension for browser-based detection │ ├── manifest.json │ ├── content.js │ ├── popup.html/js │ └── background.js ├── cli/ Command-line...
CVE-2025-32463-lab
CVE-2025-32463 Vulnerability Lab Environment This project builds an experimental environment based on Docker for reproducing and testing the sudo local privilege escalation vulnerability CVE-2025-32463. The image contains the affected version of sudo, along with exploit scripts and auxiliary tool...
CVE-2026-18963_analyst
Open Source Identity and Access Management Add authentication to applications and secure services with minimum effort. No need to deal with storing users or authenticating users. Keycloak provides user federation, strong authentication, user management, fine-grained authorization, and more. Help...
CVE-2024-1071-Docker
CVE-2024-1071 with Docker 🎯 Want to practice with the new WordPress CVE ? Follow the instructions Build the lab 1. Install Docker : https://docs.docker.com/get-docker/ 2. Clone the project : git clone https://github.com/Trackflaw/CVE-2024-1071-Docker.git. 3. Go to the project : cd...
CVE-2021-41773-Exploit-Lab
CVE-2021-41773 — Exploit Development Lab Overview This project documents the research, reproduction, and Proof-of-Concept PoC development for CVE-2021-41773, a Path Traversal vulnerability affecting Apache HTTP Server 2.4.49. The vulnerability was reproduced in an isolated Docker laboratory...
CVE-2021-44228-PoC
Self-contained lab environment PoC that runs a reverse-shell with Log4Shell CVE-2021-44228 This is a self-contained lab environment that runs the exploit safely, all from docker compose. The affected versions are Apache Log4j =2.0–2.14.1 and the CVE is tracked as CVE-2021-44228 CVSS score: 10.0. ...
NextJS-CVE-2025-29927-Docker-Lab
🚨 NextJS-CVE-2025-29927-Docker-Lab This repository contains a Docker-based lab environment to explore and demonstrate the Next.js CVE-2025-29927 vulnerability in a controlled setting. ⚠️ DISCLAIMER: This lab is for educational and security research purposes only. Do not expose it to the public...
cve-2026-27483-lab
CVE-2026-27483 Lab - Enterprise Vulnerability Learning Environment A complete, realistic, enterprise-style Docker-based lab for learning, testing, and defending against CVE-2026-27483 MindsDB Path Traversal → RCE. This repository provides a deployable lab topology, configs, minimal container...
LayarKacaSiber-CVE-2021-41773
CVE-2021-41773 - Apache HTTP Server 2.4.49 How to Run the CVE-2021-41773-Path Traversal Lab 1. Install and run Docker on your PC/Laptop 2. Clone this GitHub repo 3. Go to the Path Traversal folder 4. Run the following commands docker build -t cve-2021-41773-path-traversal . and docker run --rm -d...
CVE-2021-41773-Apache-Lab
CVE-2021-41773 — Apache HTTP Server 2.4.49 Lab Reproduction of CVE-2021-41773 , a path traversal vulnerability in Apache HTTP Server 2.4.49. This project uses Docker to create an isolated vulnerable environment and a Python PoC to demonstrate controlled file disclosure. Safety: The PoC only accep...
log4shell-exploitation-lab
Log4Shell Exploitation Lab CVE-2021-44228 Reproduced the Log4Shell vulnerability end to end in an isolated lab environment, from initial exploitation through to a full remediation report. Done as a paired piece of MSc coursework with Aditya Chaudhari, written up together as a joint report. What I...