CVE-2018-20250-WinRAR

CVE-2018-20250-WinRAR 이 자료는 저자가 WinRAR 취약점 CVE-2020-0601을 재현하고 관련 리소스 및 글을 결합하여 구현한 것입니다. 저자의 블로그와 함께 이 취약점을 재현하고 악성 소프트웨어 자동 실행 하이재킹 원리를 이해하는 것을 권장합니다. 사이버 보안 초보자로서 저도 정말 부족하지만, 포기하지 않고 함께 힘내길 바랍니다!...

gha-lab-6c3094af9e

自動化された研究アーティファクト — 上流プロジェクトではありません。 このリポジトリは、ラヴァル大学の修士論文のために、公開されているGitHub Actionsワークフローの脆弱性の再現を目的として、自動化ハーネスによって構築された使い捨てのラボです。これは、コミット8529a7746ce2cae946bd2346cb3792c22f86cbee（2026-02-24）時点のopenlit/openlitの逐語的なスナップショットであり、そのプロジェクト自身のライセンスに基づいて再配布されています。そのライセンスファイルは、このスナップショットに変更を加えずに含まれています。...

CVE-2025-31486

CVE-2025-31486-PoC.py url 이미지 취약점 재현 및 특정 환경 구성에 대한 자세한 내용은 다음을 참조하세요：https://chenchena.blog.csdn.net/article/details/147150357?spm=1001.2014.3001.5502...

apache_druid_CVE-2021-36749

apachedruidCVE-2021-36749 CVE-2021-36749 Docker 취약점 재현 Docker 이미지 가져오기: docker import apachedruid.tar apache:1 Docker 시작: docker run -id --name apachedruid -p 8081:8081 -p 8082:8082 -p 8083:8083 -p 8888:8888 -p 8091:8091 -p 2181:2181 이미지ID /bin/bash Docker에 진입하여 startapachedruid.sh를 실행해 apachedru...

CVE-2022-22947-exp

CVE-2022-22947-exp CVE-2022-22947 취약점을 재현하고, 취약점 익스플로잇exp을 작성했습니다. 이후 고수분의 글을 참고하여 메모리 셸 인젝션 익스플로잇exp을 작성했습니다. 참고용으로만 사용하세요...

FuzzingBrain-Bench

FuzzingBrain Bench LLM駆動の脆弱性再現のためのベンチマーク。43のオープンソースプロジェクト（C / C++ / Java）における77件の実在するゼロデイバグを対象としています。 各チャレンジでは、エージェントにファズハーネス （ターゲット）と、脆弱性のあるリビジョンでのプロジェクトソースのみが与えられます。パッチ、修正コミット、ターゲット行は一切提供されません。エージェントは、サニタイザの下で障害を再トリガーする入力を発見する必要があります。すべての評価は決定的 （LLM-as-judgeではない）であり、イメージ内かつオフライン...

grafana-cve-2021-43798

grafana-cve-2021-43798 このリポジトリには、脆弱性を再現するためのファイルが含まれています。 以下のコマンドを使用して、クラスターにデプロイします。 kubectl apply -f grafana-vuln-app.yaml...

SoftwareSystemSecurity-2019

SoftwareSystemSecurity-2019 소프트웨어 시스템 보안 기말 과제: 취약점 재현 CVE-2018-4878 Flash 0day...

cve-2018-2628

cve-2018-2628 취약점 재현...

CVE-2023-25813

CVE-2023-25813 CVE-2023-25813 脆弱性再現 - Sequelize における SQL インジェクション...

cve-2021-44228-log4j-exploits

CVE-2021-4428 재현 본 DEMO는 Log4j2 초고위험 RCE 취약점 CVE-2021-4428의 재현 DEMO로, 해당 취약점의 위험성을 인지하고 사용자 시스템의 상황에 따라 맞춤형 방어를 수행하는 것을 목적으로 합니다. 경고 본 DEMO는 기술적 측면에 대한 연구일 뿐이며, 악의적인 원격 컴퓨터 침입과 관련된 스크립트는 포함하지 않습니다. 취약점을 이용하여 타인의 컴퓨터를 불법 침입하는 위법 활동을 삼가시기 바랍니다. 위반할 경우 다음과 같은 책임을 부담할 수 있습니다. 1. 《中华人民共和国治安管理处罚法》제29조에...

cve-2025-22223-demo-1.0.0

cve-2025-22223-demo-1.0.0 cve-2025-22223 취약점 재현...

cve-lab-journal

CVE Lab Journal !CVEs loggedhttps://img.shields.io/badge/C...

NICE: A Framework for Declarative and Machine-Checkable Vulnerability Reproduction

Reproducing software vulnerabilities is fundamental to security researchers, open-source maintainers, and educators. Yet, vulnerabilities remain hard to reproduce today, and even when they can be reproduced, recreating a software environment where the vulnerability can be exploited becomes harder...

pocxgen-agent

PoCXGen Agent An LLM-orchestrated multi-agent pipeline for au...

PoC-Adapt: Semantic-Aware Automated Vulnerability Reproduction with LLM Multi-Agents and Reinforcement Learning-Driven Adaptive Policy

While recent approaches leverage large language models LLMs and multi-agent pipelines to automatically generate proof-of-concept PoC exploits from vulnerability reports, existing systems often suffer from two fundamental limitations: unreliable validation based on surface-level execution signals...

Exploit for OS Command Injection in Cacti

CVE-2022-46169 Reproduction Template Project Structure -...

CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Security Vulnerability

CVE-Factory is a Multi-Agent system for fully automated, end-to-end CVE reproduction. Given CVE records, the system automatically researches details, generates test cases, builds Docker environments, and validates that each vulnerability can be both exploited and patched. The pipeline transforms...

LLM Agents for Automated Web Vulnerability Reproduction: Are We There Yet?

Large language model LLM agents have demonstrated remarkable capabilities in software engineering and cybersecurity tasks, including code generation, vulnerability discovery, and automated testing. One critical but underexplored application is automated web vulnerability reproduction, which...

Exploit for Out-of-bounds Write in Cypress Cyw20735_Firmware

This repository is an offensive tool for firmware emulation and fuzzing. It provides a virtual environment to fuzz wireless firmwares, allowing for the extraction of their current state and re-execution in a virtual environment for fuzzing. The tool is currently optimized for the CYW20735 Bluetoo...