DedSec

DedSec Project Official Website DedSec Project Για να μεταβείτε στην πλήρη Ελληνική έκδοση, συνεχίστεΠατώντας Εδώ. The DedSec Project is a broad educational toolkit built for Android + Termux , bringing together many scripts, utilities, local web interfaces, and practice environments in one place...

100_days_of_kql_2026

100 Days of KQL 2026 Inititave Requirements: Create a GitHub account Create a repo called 100daysofkql Example: https://github.com/m4nbat/100daysofkql2026 Create a readme.md and add this line to your readme: 100DaysOfKQL2026 Master repo with instructions: https://github.com/m4nbat/100daysofkql202...

web-hacking-playground

Web Hacking Playground Descripción Web Hacking Playground es un entorno controlado de hacking web. Consta de vulnerabilidades encontradas en casos reales, tanto en pentests como en programas de Bug Bounty. El objetivo es que los usuarios puedan practicar con ellas, y aprender a detectarlas y...

WannaRace

🚀 WannaRace Aplicación web intencionalmente vulnerable a condiciones de carrera. 🤖 Descripción Se puede practicar la vulnerabilidad de condición de carrera en la aplicación web desarrollada. La tarea es comprar una Mega Box usando una condición de carrera que cuesta más que los vales disponibles...

cmdchamp

cmdchamp Entrenador de CLI en Bash: 30 niveles desde ls hasta escalada de privilegios. Cada pregunta te pide que escribas un comando real: obtén retroalimentación instantánea y continúa. Si fallas, no solo te muestra la respuesta: te muestra lo que TU comando imprimió frente a lo que se esperaba,...

LKWA

LKWA Lesser Known Web Attack Lab está diseñado para pentesters intermedios que pueden probar y practicar ataques web menos conocidos como Object Injection, XSSI, PHAR Deserialization, variables variables, etc. Los write-ups son bienvenidos. Mi propio walk-through está aquí . Instalación - Local...

dockle

Dockle - コンテナイメージのセキュリティLinter、ベストプラクティスなDockerイメージの構築を支援、すぐに始められます Dockle は以下を支援します: 1. ベストプラクティスに従ったDockerイメージの構築 2. 安全なDockerイメージの構築 チェックポイントは CIS Benchmarks に準拠bash $ brew untap goodwithtech/dockle who use 0.1.16 or older version $ brew install goodwithtech/r/dockle $ dockle YOURIMAGENAME...

vulnmachines

Hi there 👋 Vulnmachines is a cybersecurity learning platform where security enthusiasts can get a hands-on experience of various skills in different cybersecurity categories through Capture The Flag Contests. Checkout our Platform Vulnmachines.com Our YouTube channel Vulnmachines Follow us YouTub...

shellshock-victim-host

shellshock-victim-host A docker container vulnerable to Shellshock - CVE-2014-6271 Run root@kitploit: podman build -t shellshock-victim . podman run -it -p 80:8080 shellshock-victim Note: Builds with docker as well. The vulnerable app will be deployed on : http://localhost:8080/victim.cgi -...

BadBlood

BadBlood BadBlood by Secframe fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an...

BadBlood

BadBlood BadBlood de Secframe llena un dominio de Microsoft Active Directory con una estructura y miles de objetos. La salida de la herramienta es un dominio similar a un dominio del mundo real. Después de ejecutar BadBlood en un dominio, los analistas e ingenieros de seguridad pueden practicar e...

vuln-bank-mobile

💳 易受攻击的银行移动应用 易受攻击的银行 是一款故意设计为不安全的移动应用，面向安全工程师、渗透测试人员以及移动应用安全学习者，用于练习和演示现实中不安全编码实践的利用。 该移动应用是 易受攻击的银行 API 的前端，后者是一个刻意包含漏洞的 Web API，具有典型的银行功能。 📥 立即下载并运行（推荐） 🆕 你现在可以直接从 GitHub Releases 下载编译好的 .apk 文件。 📦 下载最新 APK ⚠️ 在你的 Android 设备上启用安装未知应用 🚫 无需自行构建 —— 直接安装即可开始测试！ 此 APK 包含所有易受攻击的功能、静态密钥，并且可与你自己托管的 API...

Burp_VulPscan

BurpVulPscan burp passive scanning plugin, currently only CVE-2022-22947 Plan to integrate various collected high-threat PoCs together and add them in. A practice project for learning Java...

DEV-CVE-2021-4034

DEV-CVE-2021-4034 Repository for the DEV practice on the CVE-2021-4034 vulnerability. Created solely for academic purposes...

bluekeep_metasploit_practice

bluekeepmetasploitpractice Exploiting bluekeep CVE-2019-0708 on windows 7 using metasplotable...

awesome-cyber-skills

awesome-cyber-skills A curated list of hacking environments where you can train your cyber skills free, legally and safely About the List In the field of Information Security, understanding the enemy, the hacker, is crucial. By knowing your enemy, you can effectively defend and secure the digital...

Project-01-Cybersecurity-Home-Lab

Project 1 — Cybersecurity Home Lab Project Overview This...

CVE-2026-82181

Medical Practice Management System developed by Le-yan has a Sensitive Data in URL vulnerability. Unauthenticated remote attackers can obtain sensitive information via victim's browser history or log files...

CVE-2026-82181 Le-yan｜Medical Practice Management System - Sensitive Data in URL

Medical Practice Management System developed by Le-yan has a Sensitive Data in URL vulnerability. Unauthenticated remote attackers can obtain sensitive information via victim's browser history or log files...

CVE-2026-78685 Le-yan｜Medical Practice Management System - Remote Code Execution

Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS commamnds via a crafted HTML page...