cmdchamp

cmdchamp Bash CLI trainer — 30 levels from ls to privilege escalation. Every question asks you to type a real command — get instant feedback, move on. Miss one and it doesn't just show you the answer: it shows what YOUR command printed against what was wanted, and for a pipeline the line count at...

vulnmachines

안녕하세요 👋 Vulnmachines는 보안 애호가들이 Capture The Flag 대회를 통해 다양한 사이버보안 분야의 여러 기술을 직접 실습해 볼 수 있는 사이버보안 학습 플랫폼입니다. 저희 플랫폼을 확인해 보세요 Vulnmachines.com 저희 YouTube 채널 Vulnmachines 저희를 팔로우하세요 YouTube Twitter Facebook LinkedIn...

WannaRace

🚀 WannaRace 故意制造了竞态条件漏洞的 Web 应用 🤖 描述 可以在开发的 Web 应用中练习竞态条件漏洞。任务是通过竞态条件购买一个价值超过可用优惠券的 Mega Box。提供了两个挑战进行练习。挑战 B 需要提供 PHPSESSID cookie 才能解决，用户登录时会自动创建该 cookie。祝你学习愉快 🎉。 🛠 构建并运行 Docker 镜像 使用以下命令构建 Docker 镜像： root@kitploit: git clone https://github.com/Xib3rR4dAr/WannaRace && cd WannaRace docker build...

100_days_of_kql_2026

Iniciativa 100 Días de KQL 2026 Requisitos: Crear una cuenta de GitHub Crear un repositorio llamado 100daysofkql Ejemplo: https://github.com/m4nbat/100daysofkql2026 Crear un readme.md y agregar esta línea a tu readme: 100DaysOfKQL2026 Repositorio principal con instrucciones:...

vuln-bank-mobile

💳 App mobile Vulnerable Bank Vulnerable Bank è un'applicazione mobile volutamente insicura progettata per ingegneri della sicurezza, penetration tester e studenti di sicurezza delle app mobili per esercitarsi e dimostrare lo sfruttamento reale di pratiche di codifica insicure. Questa app mobile...

web-hacking-playground

Web Hacking Playground Beschreibung Web Hacking Playground ist eine kontrollierte Web-Hacking-Umgebung. Sie besteht aus Schwachstellen, die in realen Fällen gefunden wurden, sowohl bei Pentests als auch bei Bug-Bounty-Programmen. Ziel ist es, dass Benutzer damit üben und lernen, sie zu erkennen u...

DedSec

DedSec Project Sito Web Ufficiale -brightgreen.svg DedSec Project Για να μεταβείτε στην πλήρη Ελληνική έκδοση, συνεχίστεΠατώντας Εδώ. Il DedSec Project è un'ampia toolkit educativa realizzata per Android + Termux , che riunisce in un unico posto molti script, utilità, interfacce web locali e...

LKWA

LKWA Lesser Known Web Attack Lab é para pentesters intermediários que podem testar e praticar ataques web menos conhecidos, como Object Injection, XSSI, PHAR Deserialization, variável de variáveis, etc. Write-ups são bem-vindos. Meu próprio walk-through está aqui . Instalação - Local Apenas clone...

dockle

Dockle - Linter per immagini container per la sicurezza, aiuta a costruire l'immagine Docker secondo le migliori pratiche, facile da iniziare Dockle ti aiuta: 1. Costruire immagini Docker Best Practice 2. Costruire immagini Docker sicure I checkpoint includono CIS Benchmarksbash $ brew untap...

BadBlood

BadBlood BadBlood by Secframe fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an...

BadBlood

BadBlood BadBlood, Secframe द्वारा, एक Microsoft Active Directory डोमेन को एक संरचना और हजारों ऑब्जेक्ट्स से भर देता है। इस टूल का आउटपुट एक ऐसा डोमेन है जो वास्तविक दुनिया के डोमेन के समान होता है। BadBlood को डोमेन पर चलाने के बाद, सुरक्षा विश्लेषक और इंजीनियर टूल का उपयोग करके समझ हासिल करने औ...

Burp_VulPscan

BurpVulPscan Burp-Passiv-Scan-Plugin, derzeit nur CVE-2022-22947 Geplant, die gesammelten verschiedenen hochgefährlichen PoCs darin zu integrieren. Ein Übungsprojekt zum Erlernen von Java...

CVE-2026-78685 Le-yan｜Medical Practice Management System - Remote Code Execution

Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS commamnds via a crafted HTML page...

CVE-2026-78685

CVE-2026-78685 affects the Le-yan Medical Practice Management System , a web-based application for managing medical practices. The vulnerability is a Remote Code Execution (RCE) flaw that allows unauthenticated remote attackers to execute arbitrary OS commands by serving a crafted HTML page that ...

shellshock-victim-host

shellshock-victim-host Ein Docker-Container, der anfällig für Shellshock ist - CVE-2014-6271 Ausführen root@kitploit: podman build -t shellshock-victim . podman run -it -p 80:8080 shellshock-victim Hinweis: Funktioniert auch mit Docker. Die verwundbare Anwendung wird bereitgestellt unter:...

bluekeep_metasploit_practice

bluekeepmetasploitpractice Ausnutzen von Bluekeep CVE-2019-0708 unter Windows 7 mit Metasplotable...

awesome-cyber-skills

awesome-cyber-skills Eine kuratierte Liste von Hacking-Umgebungen, in denen du deine Cyber-Fähigkeiten kostenlos, legal und sicher trainieren kannst Über die Liste Im Bereich der Informationssicherheit ist es entscheidend, den Gegner, den Hacker, zu verstehen. Wenn du deinen Gegner kennst, kannst...

DEV-CVE-2021-4034

DEV-CVE-2021-4034 مستودع لممارسة DEV حول الثغرة الأمنية CVE-2021-4034. أُنجز لأغراض أكاديمية فقط...

SUSE CVE-2026-48025

nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.7, internal/pki/resolver.go:36-64 constructs a CAManager with the plaintext ed25519.PrivateKey after unwrapping via the master key; internal/pki/ca.go:13-16 stores it. Callers at...

EUVD-2026-49142

proCertum SmartSign opens Certificate Practice Statement CPS URI without schema validation. An attacker can prepare arbitrary certificate with CPS URI pointing to a local executable file or any URL, sign a document with it, and send it to the victim. When the victim opens the document in the...