65 matches found
docker-lab-cve-2017-5638-cve-2021-41773
攻击者实验室：CVE-2017-5638 & CVE-2021-41773 一个基于Docker的7主机攻击模拟实验室，设计用于演示多阶段杀伤链、横向移动和多重IDS检测。 概述 本实验室模拟了一个真实的网络环境，攻击者从初始侦察开始，逐步建立立足点，最终通过跳板攻击高价值目标。它包含两个独立的Suricata IDS实例，作为关键主机的伴生容器，为整个攻击生命周期提供“防御者视角”。 杀伤链 1. 侦察 ：攻击者在 172.28.0.0/24 子网内执行网络扫描（ICMP、TCP SYN、HTTP 横幅抓取）。 2. 立足点（CVE-2017-5638） ：攻击者利用...
log4shell-exploitation-lab
Log4Shell Exploitation Lab CVE-2021-44228 Reproduced the Log4Shell vulnerability end to end in an isolated lab environment, from initial exploitation through to a full remediation report. Done as a paired piece of MSc coursework with Aditya Chaudhari, written up together as a joint report. What I...
NextJS-CVE-2025-29927-Docker-Lab
root@kitploit: 🚨 NextJS-CVE-2025-29927-Docker-Lab This repository contains a Docker-based lab environment to explore and demonstrate the Next.js CVE-2025-29927 vulnerability in a controlled setting. ⚠️ DISCLAIMER: This lab is for educational and security research purposes only. Do not expose it to...
apache-cve-2021-42013-rce
apache-cve-2021-42013-rce Docker-based penetration testing lab simulating CVE-2021-42013 vulnerability Path Traversal & RCE on Apache HTTP Server 2.4.49. This project is prepared to simulate and exploit the CVE-2021-42013 vulnerability found in Apache HTTP Server 2.4.49 in an isolated environment...
CVE-2021-41773-Exploit-Lab
CVE-2021-41773 — Exploit Development Lab Overview This project documents the research, reproduction, and Proof-of-Concept PoC development for CVE-2021-41773, a Path Traversal vulnerability affecting Apache HTTP Server 2.4.49. The vulnerability was reproduced in an isolated Docker laboratory...
EP4-redes
POC CVE-2018-15473 exploit Adapted from https://github.com/Rhynorater/CVE-2018-15473-Exploit To run this exploit you need to have installed: docker docker compose SSH server Let's start by pulling from DockerHub an image that has an old version 6.6 of SSH on an old Ubuntu: It may take a few minut...
apache-cve-2021-42013-lab
Apache HTTP Server 2.4.49 Path Traversal & Remote Code Execution CVE-2021-42013 About the Project In this project, I demonstrated the CVE-2021-42013 vulnerability in Apache HTTP Server version 2.4.49 in a lab environment I created using Docker. The goal is to examine how the vulnerability occurs,...
HTTP-2-RapidReset-CVE-2023-44487-Testlab
This repo is the source code of my docker lab, made for my thesis research...
CVE-2017-5638-Attack-and-Defense
Apache Struts2 S2-045 Defense & Exploitation Lab A Docker-based security lab demonstrating both exploitation and defense against the Apache Struts2 S2-045 vulnerability CVE-2017-5638. This lab includes: 1. Vulnerable Application : Struts 2.3.31 vulnerable to S2-045 for exploitation demonstration ...
CVE-2026-1357-Lab
CVE-2026-1357 — WPvivid Backup & Migration（漏洞版 vs 已修复版 Docker 实验环境） 仅限本地的 Docker 实验环境，用于对比 WPvivid Backup & Migration： 漏洞版本： 0.9.123 已修复版本： 0.9.124 专为学习实践而构建（实验环境搭建、验证、日志、笔记）。任何与 PoC 相关的内容均设计为仅在此实验环境的 localhost 上运行 。 安全与范围 请仅 在您自己的机器上运行（localhost + Docker 网络）。 请勿针对您不拥有或未经明确许可测试的真实站点/系统。...
CVE-2023-27372
Research Project: CVE-2023-27372 — SPIP RCE, Lab Environment + Safe PoC 1 Description This repository contains: stand/ — a lab environment vulnerable setup on Docker: SPIP + MariaDB. poc/ — a Python verification tool scanner implementing safe confirmation of the vulnerability Safe PoC without...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 — Exploit Development Lab Overview This pr...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 — Apache HTTP Server 2.4.49 Lab Reproduction o...
Exploit for CVE-2026-66066
KindaRails2Shell: CVE-2026-66066 A zero-dependency, single-fi...
Exploit for Out-of-bounds Read in Openssl
CVE-2014-0160 Lab dựng lab sử dụng Heartbleed để leak memory...
Exploit for Out-of-bounds Read in Openssl
CVE-2014-0160 Lab dựng lab sử dụng Heartbleed để leak memory...
TLS1.2_Exploit-Scripts
Breaking TLS 1.2 — Penetration Testing Lab & Exploit Scripts...
cve-research
CVE Research Personal repository for CVE analysis, proof-of-c...