DanderSpritz_lab

DanderSpritz Lab Purpose The goal of DanderSpritz lab is to allow researchers and defenders to quickly stand up a fully functional version of DanderSpritz - The Equation Group's Post exploitation tool-set and a Windows Server 2008 Domain and client as targets. The Windows target have some reverse...

HTTP-2-RapidReset-CVE-2023-44487-Testlab

This repo is the source code of my docker lab, made for my thesis research...

CVE-2017-5638-Attack-and-Defense

Apache Struts2 S2-045 Defense & Exploitation Lab A Docker-based security lab demonstrating both exploitation and defense against the Apache Struts2 S2-045 vulnerability CVE-2017-5638. This lab includes: 1. Vulnerable Application : Struts 2.3.31 vulnerable to S2-045 for exploitation demonstration ...

vulpy

Vulpy - Web Application Security Lab Vulpy is a web application developed in Python / Flask / SQLite that has two faces. GOOD : Tries to code with secure development best practices in mind. BAD : Tries to code like possibly you. :p Is developed has a laboratory for the following courses: Secure...

iam-vulnerable

IAM Vulnerable Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground. IAM Vulnerable uses the Terraform binary and your AWS credentials to deploy over 250 IAM resources into your selected AWS account. Within minutes, you can start learning how to identify a...

hackviser_labs_CVE-2015-3306

hackviserlabsCVE-2015-3306 This is a customized script to help solve the lab on remote code execution under the CVE-2015-3306 lab. run it using the following command: python3 exploit.py replace with the address you got from starting the lab on the hackviser platform...

flare-learning-hub

FLARE Learning Hub The FLARE Learning Hub freely distributes quality reverse engineering and malware analysis educational content from the FLARE team. The FLARE Learning Hub modules are hosted as web-published Google Docs, which are linked in the respective descriptions below. This repository...

arya

Arya - The Reverse YARA Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA because it does exactly the opposite - it creates files that matches your rules. You can read more about Arya and how it works in our blog. Intro...

libvshadow

libvshadow is a library to access the Volume Shadow Snapshot VSS format. The VSS format is used by Windows, as of Vista, to maintain copies of data on a storage media volume. Project information: Status: alpha Licence: LGPL-3.0-or-later Also see: OSDFC 2012: Paper - Windowless Shadow Snapshots:...

CVE-2025-55182-LAB

This repository does not have a README...

spring-boot-log4j-cve-2021-44228-docker-lab

Spring Boot Log4j - CVE-2021-44228 Log4Shell漏洞（CVE-2021-44228）本质上是一个相当简单的JNDI注入缺陷，但出现在一个非常糟糕的位置。Log4J在展开日志消息中的占位符（或间接作为格式化消息的参数）时，会执行JNDI lookup……更多内容请阅读 PSA: Log4Shell与JNDI注入的当前状态。 Docker 实验室设置 注意： 此Dockerfile最初来自 Log4Shell示例漏洞应用 CVE-2021-44228。它使用了Log4j 2.14.1（通过spring-boot-starter-log4j2...

Lab4PurpleSec

Lab4PurpleSec Note : This project was previously named "Lab4OffSec" and has been renamed to "Lab4PurpleSec" to better reflect its Purple Team focus. Note : This is a V1. Feedback and contributions are welcome. 📜 License Notice : The use of this project including for CTFs, commercial projects,...

ludus-defender-lab

Ludus Defender Lab Configuración de rango Ludus y roles de Ansible para un laboratorio de seguridad de Windows preconfigurado para MDE y MDI, con una instalación de ADCS completamente mal configurada para probar la cobertura de detección. Config| VMs| Propósito ---|---|--- zsec-mde-mdi-lab.yml|...

DefCon25

实验室设置 1. 2 台虚拟机 = Win7 x64 和 Win10RS1/2 x64 2. 将 "DefCon-Tool.zip" 解压到 C 盘根目录 3. 遵循幻灯片和 Lab-Writeup.txt...

secureCodeBox

OWASP secureCodeBox...

DevGuide

OWASP 基金会开发者指南 开发者指南是 OWASP 的原始文档之一，因此有着悠久的历史。 原始的 DevGuide 仓库包含许多旧版本，最早可追溯到 2002 年发布的1.0 首个版本。 这是开发者指南文档的内容，即 DevGuide 仓库；本指南的最新版本可在网页文档中访问。 OWASP 开发者指南项目页面的内容位于其独立的仓库中。 OWASP 有一期关于 OWASP 开发者指南的历史 的播客，其中讨论了该项目的过去与未来。 贡献 欢迎为开发者指南提供贡献和建议；请从阅读贡献指南开始，并遵守贡献者行为准则。 如需对这些页面做出其他贡献，请创建 issue 或发起拉取请求。...

autoguardrails

autoguardrails Open source by Santander AI Lab. An LLM / AI-safety guardrail research library / evaluation harness autoresearch-style: it searches over a single mutable policy.md surface to minimize attack success rate ASR against a fixed evaluation suite, with a benign-pass floor. Part of...

BlueTeam.Lab

BlueTeam.Lab Purpose This project contains a set of Terraform and Ansible scripts to create an orchestrated BlueTeam Lab. The goal of this project is to provide the red and blue teams with the ability to deploy an ad-hoc detection lab to test various attacks and forensic artifacts on the latest...

DockSec

...

CyberSec2026

Victim installation Start your VM in VirtualBox 1. Log in with: username: osboxes password: osboxes.org 2. Open a terminal 3. Test if you have a working internet connection. root@kitploit: ping 8.8.8.8 If your ping is not successful, check if your NAT interface is enabled. 4. Update your OS...