527 matches found
BadBlood
BadBlood BadBlood by Secframe fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an...
LKWA
LKWA Lesser Known Web Attack Lab is for intermediate pentester that can test and practice lesser known web attacks such as Object Injection, XSSI, PHAR Deserialization, variables variable ..etc. Write-ups are welcome. My own walk-through is here . Installation - Local Just clone the git with git...
DedSec
DedSec Project Official Website DedSec Project First-setup legal confirmation / Πρώτη εγκατάσταση: bash Setup.sh requires acceptance of the English/Greek legal documents in Important Documents/ before installing anything. Press y or Enter to accept; n to cancel safely and retry later; r for readi...
100_days_of_kql_2026
100 Days of KQL 2026 Inititave Requirements: Create a GitHub account Create a repo called 100daysofkql Example: https://github.com/m4nbat/100daysofkql2026 Create a readme.md and add this line to your readme: 100DaysOfKQL2026 Master repo with instructions: https://github.com/m4nbat/100daysofkql202...
cmdchamp
cmdchamp Bash CLI trainer — 30 levels from ls to privilege escalation. Every question asks you to type a real command — get instant feedback, move on. Miss one and it doesn't just show you the answer: it shows what YOUR command printed against what was wanted, and for a pipeline the line count at...
WannaRace
🚀 WannaRace WebApp intentionally made vulnerable to Race Condition 🤖 Description Race Condition vulnerability can be practiced in the developed WebApp. Task is to buy a Mega Box using race condition that costs more than available vouchers. Two challenges are made for practice. Challenge B is to b...
vuln-bank-mobile
💳 Vulnerable Bank Mobile App Vulnerable Bank is an intentionally insecure mobile application built for security engineers, penetration testers, and mobile app security learners to practice and demonstrate real-world exploitation of insecure coding practices. This mobile app acts as a frontend for...
Burp_VulPscan
BurpVulPscan burp passive scanning plugin, currently only CVE-2022-22947 Plan to integrate various collected high-threat PoCs together and add them in. A practice project for learning Java...
awesome-cyber-skills
🛡️ awesome-cyber-skills A curated list of hacking environments where you can train your cyber skills free, legally and safely. 👋 Welcome Welcome to awesome-cyber-skills — your one-stop library for free, legal, and safe places to train your cybersecurity skills. 📑 Table of Contents 📖 About the List...
DEV-CVE-2021-4034
DEV-CVE-2021-4034 Repository for the DEV practice on the CVE-2021-4034 vulnerability. Created solely for academic purposes...
vulnmachines
Hi there 👋 Vulnmachines is a cybersecurity learning platform where security enthusiasts can get a hands-on experience of various skills in different cybersecurity categories through Capture The Flag Contests. Checkout our Platform Vulnmachines.com Our YouTube channel Vulnmachines Follow us YouTub...
bluekeep_metasploit_practice
bluekeepmetasploitpractice Exploiting bluekeep CVE-2019-0708 on windows 7 using metasplotable...
shellshock-victim-host
shellshock-victim-host A docker container vulnerable to Shellshock - CVE-2014-6271 Run podman build -t shellshock-victim . podman run -it -p 80:8080 shellshock-victim Note: Builds with docker as well. The vulnerable app will be deployed on : http://localhost:8080/victim.cgi - Vulnerable endpoint...
CVE-2026-114119
Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and cannot be changed without breaking the application. Attackers with network access to the database instance can authenticate as sysadmin,...
CVE-2026-114119 Best Practice Software Bp Premier before 1.14.1.1128 Hardcoded SQL Server Administrative Credential
Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and cannot be changed without breaking the application. Attackers with network access to the database instance can authenticate as sysadmin,...
CVE-2026-114119
Best Practice Software Bp Premier versions prior to 1.14.1.1128 contain a hardcoded Microsoft SQL Server administrative password shared across all installations. This credential cannot be modified without breaking the application. An attacker with network access to the database instance can use t...
EUVD-2026-106922
Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and cannot be changed without breaking the application. Attackers with network access to the database instance can authenticate as sysadmin,...
PT-2026-120245
Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and cannot be changed without breaking the application. Attackers with network access to the database instance can authenticate as sysadmin,...
Best Practice Software Bp Premier Trust Management Vulnerability
The Best Practice Software Bp Premier versions prior to 1.14.1.1128 have a vulnerability related to trust management. This vulnerability arises from the use of a hardcoded Microsoft SQL Server management password shared across all installations. An attacker with network access to database instanc...
