46 matches found
CVE-2021-44228-white-box
Article Journal: https://www.researchgate.net/publication/373214720PengujianKerentananpadaCVE-2021-44228terhadapAncamanRemoteAccessTrojan Thesis: https://1drv.ms/b/s!Al-8jtgY0iBXmz79DKEROaZT5n8a?e=1E6Pkm Log4Shell // n. Log4j Vulnerability Environment Box This repo purposely built for Log4j...
CVE-2018-5803
CVE-2018-5803 Lab for testing CVE-2018-5803 root@kitploit: vagrant destroy -f vagrant up vagrant reload vagrant provision --provision-with sctp...
testenv
SQL 注入测试环境 一组存在 SQL 注入漏洞及其他缺陷的网页： conf/ - 由 deployment.sh 使用的操作系统配置文件。 dbs/ - 某些数据库管理系统（如 Microsoft Access）的独立数据库。 libs/ - 用于连接数据库管理系统、执行所提供的语句并返回其输出的 Web API 库。 schema/ - 用于创建测试数据库、测试表并向其中填充测试条目的 SQL。 其他目录 - 针对每种数据库管理系统的易受攻击页面。 deployment.sh - 一个 bash 脚本，用于从零开始部署一台功能完备的 Linux（Debian 或...
⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More
Monday starts with the usual promise that everything is under control. Then the logs wake up. This week, trusted tools crossed lines, old flaws found new work, exposed systems stayed exposed, and attackers kept hiding inside normal-looking services. Nothing looked strange at first. That helped...
linux-malware-toolbox
Linux Malware Samples - Educational Repository ⚠️ IMPORTAN...
Exploit for Use After Free in Google Chrome
⚠️ CVE-2026-2441-PoC - Test Chrome Vulnerability Safely !Do...
CVE-2026-27468
Mastodon is a free, open-source social network server based on ActivityPub. FASP registration requires manual approval by an administrator. In versions 4.4.0 through 4.4.13 and 4.5.0 through 4.5.6, actions performed by a FASP to subscribe to account/content lifecycle events or to backfill content...
vulnerability-assessment-lab
vulnerability-assessment-lab Controlled security test...
Exploit for CVE-2018-8581
CVE-2018-8581 Testing Environment This directory contains a r...
Exploit for Missing Authorization in Valvepress Wordpress_Automatic_Plugin
CVE-2021-4374 Testing Environment Complete testing package fo...
EUVD-2023-43732
Malicious code in bioql PyPI...
Exploit for Improper Input Validation in Tvt Td-2108Ts-Cl_Firmware
CVE-2025-34036 - TVT DVR Simulation This repository contains...
Faraday 5.15.2
Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use...
Exploit for Missing Authorization in Gitlab
CVE-2023-5612 – GitLab SSRF via Webhook URL PoC & Analysis...
WordPress Security Research Series: Setting Up Your Research Lab
Welcome to Part 3 of the WordPress Security Research Beginner Series! If you haven’t yet, take a minute to check out the series introduction to get a sense of what this series is all about. You’ll also want to catch up on Part 1, where we dig into WordPress request architecture and hooks, and Par...
UniRide Vehicle Booking Management System 1.0 Insecure Direct Object Reference
UniRide Vehicle Booking Management System version 1.0 suffers from an insecure direct object reference vulnerability. ============================================================================================================================================= | Title : UniRide Vehicle Booking...
Judge0 1.13.0 Code Execution
Judge0 version 1.13.0 suffers from a code execution vulnerability. ============================================================================================================================================= | Title : Judge0 v 1.13.0 PHP Code Injection Vulnerability | | Author : indoushka | |...
Exploit for Improper Encoding or Escaping of Output in Apache Http_Server
CVE-2024-38473 Nuclei Template !imagehttps://github.com/us...