web-hacking-playground

Web Hacking Playground Description Web Hacking Playground is a controlled web hacking environment. It consists of vulnerabilities found in real cases, both in pentests and in Bug Bounty programs. The objective is that users can practice with them, and learn to detect and exploit them. Other topic...

hackerEnv

Reach me at: hackerEnv...

PMD

Practical Malware Development Exercise 1 - Environment Setup 1. Get a Windows virtual machine setup within a hypervisor. a. Make sure to take a snapshot of your base installation. 2. Download and install Visual Studio 2022 - https://visualstudio.microsoft.com/vs/ a. Select Desktop development wit...

CVE-2024-23897

CVE-2024-23897 Construcción del entorno 1. Instalación de Java sudo apt update sudo apt install openjdk-11-jdk -y 2. Descarga del archivo WAR de Jenkins wget https://get.jenkins.io/war/2.441/jenkins.war 3. Cambiar la versión predeterminada de Java - Seleccionar Java 11 sudo update-alternatives...

CVE-2024-22243-CVE-2024-22234

entorno de CVE-2024-22243 y CVE-2024-22234 detalle: https://www.cnblogs.com/9eek/p/18037571...

AV-EDR-Lab-Environment-Setup

Configuración del entorno de laboratorio AV/EDR Tomado inicialmente del Discord de Maldev Academy y se añadieron más recursos. Notas de Notion: https://an0nud4y.notion.site/AV-EDR-Lab-Env-Setup-130bc870022d8071935cc682d3eb34b9?pvs=4 Un ejemplo de cosas que se pueden usar para emular ciertas...

CVE-2024-4577

Archivo de configuración del entorno CVE-2024-4577 y archivo PHP --poc-- Invoke-WebRequest -Method POST -Headers @"Content-Type" = "application/x-www-form-urlencoded" -Body "" -Uri "http://localhost/test.php?%ADd+allowurlinclude%3D1+%ADd+autoprepend file%3Dphp://input"...

Vulnerability-Wiki-PoC

💠 Vulnerability-Wiki-PoC 🚀 Focused on practical applicati...

Malicious code in cipherflow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281ede3c5b3181c2df22a4b32a01453a51ac389a1dfe8bde69d53821cbaf20d4 cipherflow advertises itself as a zero-dependency pure-Python AES/DES library, but cipherflow/environ.py contains a multi-layer-obfuscated payload th...

RISC-V-In-Proactive-computer-Security-PCS-

Exploring RISC-V in Proactive Computer Security PCS PUK pro...

RISC-V-In-Proactive-computer-Security-PCS

Exploring RISC-V in Proactive Computer Security PCS PUK pro...

Exploit for Classic Buffer Overflow in Freefloat Freefloat_Ftp_Server

CVE-2025-5548 Security research and reprod...

Exploit for Path Traversal in Jenkins

CVE-2024-23897 환경 구축 1. Java 설치 sudo apt update sudo apt ins...

Creation of Temporary File With Insecure Permissions

Overview Affected versions of this package are vulnerable to Creation of Temporary File With Insecure Permissions in the getorcreatetmpdir function in fileutils.py. This enables an attacker who can write to /tmp to cause the execution of arbitrary .py files during environment setup. Remediation...

Exploit for CVE-2025-30208

CVE-2025-30208 & CVE-2025-31125 & CVE-2025-31486 1. Overvie...

Exploit for Path Traversal in Lfprojects Mlflow

MLflow CVE-2023-1177 - PoC & Reproduce Repo này chứa mã khai...

Exploit for CVE-2025-31486

CVE-2025-31486-PoC.py url !imagehttps://github.co...

Exploit for Deserialization of Untrusted Data in Apache Tomcat

利用条件 + DefaultServlet 写入功能启用：需在 web.xml 中配置 readonly=false...

Exploit for CVE-2024-9926

wordpress-jetpack-broken-access-control-vulnerable-application...

CVE-2024-39934

Robotmk before 2.0.1 allows a local user to escalate privileges e.g., to SYSTEM if automated Python environment setup is enabled, because the "shared holotree usage" feature allows any user to edit any Python environment...