homelab-CVE-2025-68613

How to Use Docker Compose for This Project This guide explains how to install Docker Compose and run the project using the provided docker-compose.yml file. Prerequisites Docker must be installed on your system. See the official Docker installation guide for instructions. Installing Docker Compos...

CVE-2019-15107

CVE-2019-15107 This is information about the CVE-2019-15107 Webmin vulnerability, including building a server and recording attack results...

cve-2023-22515

CVE-2023-22515 This describes the logic of exploiting the vulnerability via Burp Suite. To exploit, you need to change the value of the attribute bootstrapStatusProvider.applicationConfig.setupComplete to false, i.e., execute the request: Endpoint for switching Confluence to setup mode:...

CVE-2023-7028

CVE-2023-7028lab Implementation and exploitation of CVE-2023-7028 account takeover vulnerability related to GO-TO CVE weekly articles of the 11th week. This repository contains a Docker setup and a Python script to test the CVE-2023-7028 vulnerability in GitLab. The provided script automates the...

CVE-2024-22243-CVE-2024-22234

env of CVE-2024-22243&CVE-2024-22234 detail: https://www.cnblogs.com/9eek/p/18037571...

CVE-2023-22515-check

Disclaimer This script is for educational and testing purposes only. Use it responsibly and ensure you have permission to test the target Confluence instance. Unauthorized testing is illegal and unethical. Confluence CVE-2023-22515 Vulnerability Detection Script This script checks if a Confluence...

CyberSec2026

Victim installation Start your VM in VirtualBox 1. Log in with: username: osboxes password: osboxes.org 2. Open a terminal 3. Test if you have a working internet connection. root@kitploit: ping 8.8.8.8 If your ping is not successful, check if your NAT interface is enabled. 4. Update your OS...

CVE-2025-55182-Researching-process

CVE-2025-55182 Research Repository Ethical Disclaimer This repository is dedicated to defensive cybersecurity research and educational purposes only. All content is focused on: Understanding vulnerabilities for defensive purposes Developing detection mechanisms Implementing mitigation strategies...

CVE-2023-32315

CVE-2023-32315 root@kitploit: GET /setup/setup-s/%002e%002e/Su002esu002e/log.jsp HTTP/1.1 Host: 192.168.40.132:9090 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; X64 AppleWebKit/537.36 KHTML, like Gecko Chrome/109.0.5414.120 Safari/537.36 Accept:...

CVE-2024-23897

CVE-2024-23897 Environment Setup 1. Install Java sudo apt update sudo apt install openjdk-11-jdk -y 2. Download Jenkins WAR file wget https://get.jenkins.io/war/2.441/jenkins.war 3. Change default Java version - Select Java 11 sudo update-alternatives --config java 4. Verify version - Check...

Firmware-CVE-2025-7545

Preparing to download the repository 1. Update packages: sudo apt-get update 2. If necessary, install git: sudo apt install -y git Downloading the repository, installing the vulnerable Binutils, and setting up the environment 1. Download the repository: git clone...

CVE-2025-55182-LAB

This is setup lab for reproducing CVE-2025-55182 Read more on note.md...

AV-EDR-Lab-Environment-Setup

AV/EDR Lab Environment Setup Initially taken from Maldev Academy Discord and added more resources. Notion Notes : https://an0nud4y.notion.site/AV-EDR-Lab-Env-Setup-130bc870022d8071935cc682d3eb34b9?pvs=4 An example of things that can be used to emulate certain features that paid edrs have: SACL -...

CVE-2023-38646

CVE-2023-38646 Metabase RCE sin autenticación 26/11/2023 Metabase open source anterior a 0.46.6.1 y Metabase Enterprise anterior a 1.46.6.1 permiten a los atacantes ejecutar comandos arbitrarios en el servidor, al nivel de privilegio del servidor. No se requiere autenticación para la explotación...

React2Shell-CVE-2025-55182

React2Shell CVE-2025-55182 POC y configuración del laboratorio Crear el servidor desde cero root@kitploit: npm create [email protected] react2shell-lab Aceptar los valores predeterminados está bien, ponle el nombre que quieras O Clonar el repositorio root@kitploit: git clone...

CVE-2026-46420

CVE-2026-46420 PoC Command injection in shivammathur/setup-php when the PHP version is loaded from repository controlled files. Affected: root@kitploit: = 2.25.0, = 2.37.1 PoC The target repository already has a vulnerable workflow that checks out pull request contents and runs...

CVE-2020-2551

CVE-2020-2551 The setup script of this project has been tested on version 10.3.6, version 12 has not been tested. Environment kali+weblogic10.3.6+jdk6u25 Ensure the machine deploying weblogic has at least 1.5G of memory, because the script specifies -x1024m in its parameters. Usage Deploy weblogi...

mimosa

Mimosa Description Systems rebooting, database dumping, used to be called SecureCoding, now given to juniors, and finally completely rewritten. This is an opensource core; it excludes administrative controls. Features Lots of challenges References to modern pop culture Getting Started Method 1:Ja...

SpaceX-Starlink-Router-Gen-2-XSS

SpaceX / Starlink Router Gen 2 XSS CVE-2023-49965 You can see the Korean version of the post here : https://hackintoanetwork.com/blog/2023-starlink-router-gen2-xss-kor TL;DR A Cross-Site Scripting XSS vulnerability in the initial captive portal page of the second-generation router could allow an...

CVE-2026-11405

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...