115737 matches found
CVE-2018-7600-Drupal-RCE
CVE-2018-7600 Drupal RCE Credits to:...
Damn-Vulnerable-Drone
Damn Vulnerable Drone El Damn Vulnerable Drone es un simulador de hacking de drones intencionalmente vulnerable basado en la popular arquitectura ArduPilot/MAVLink, que proporciona un entorno realista para el hacking práctico de drones. Tabla de Contenidos Acerca del Damn Vulnerable Drone ¿Qué es...
csaf
DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Application DVWA es una aplicación web hecha en PHP/MySQL que es extremadamente vulnerable. Su principal objetivo es ayudar a profesionales de seguridad a poner a prueba sus habilidades y herramientas en un entorno legal, ayudar a desarrolladore...
dvwassl
Aplicación Web Vulnerable a Prueba con SSL activado Ejecuta una Aplicación Web Vulnerable a Prueba con SSL activado. ¿Por qué? Es posible que quieras probar detecciones de ataques web a través de SSL. Construir la imagen root@kitploit: docker build -t dvwassl:latest . Ejecutar el contenedor...
EVABS
EVABS Extremely Vulnerable Android Labs An open source Android application that is intentionally vulnerable so as to act as a learning platform for Android application security beginners. The effort is to introduce beginners with very limited or zero knowledge to some of the major and commonly...
DanderSpritz_lab
Laboratorio DanderSpritz Propósito El objetivo del laboratorio DanderSpritz es permitir a investigadores y defensores configurar rápidamente una versión completamente funcional de DanderSpritz - El conjunto de herramientas de post-explotación del Equation Group y un dominio Windows Server 2008 y ...
TopazTerminator
TopazTerminator F, Another driver got burned.. I was gatekeeping wsftprm.sys driver for a while ; but since someone posted a public POC, I'm ungatekeeping it. We all know it'll get added to the driver blocklist soon, so here's my implementation for the same — in C This project exploits the...
metarget
中文 | English 1 Introducción Metarget = meta- + target, un framework que proporciona construcciones automáticas de infraestructuras vulnerables, utilizado para desplegar objetivos nativos en la nube vulnerables simples o complicados de forma rápida y automática. 1.1 ¿Por qué Metarget? Durante las...
limeyard
limeyard A security testing lab. A fleet of deliberately vulnerable targets, a routable network estate with authoritative DNS for asset discovery to enumerate, a machine-readable answer key per target, and a control panel to drive it all. Everything here is deliberately vulnerable. Local testing...
log4j-scan
log4j-scan A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers not only 3-4 headers as previously seen tools. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters...
vuln-bank
Vulnerable Bank Application 🏦 A deliberately vulnerable web application for practicing application security testing of Web, APIs and LLMs, secure code review and implementing security in CI/CD pipelines. ⚠️ WARNING: This application is intentionally vulnerable and should only be used for...
DonkAI
Hands-on lab for the OWASP Top 10 for LLM Applications 2025 - no real LLM required. DonkAI is deliberately vulnerable web app you can run in one command and use to learn how LLM-integrated systems get broken by actually breaking them. Every OWASP LLM Top 10 category is represented by at least one...
pagodo
pagodo - Passive Google Dork Introduction pagodo automates Google searching for potentially vulnerable web pages and applications on the Internet. It replaces manually performing Google dork searches with a web GUI browser. There are 2 parts. The first is ghdbscraper.py that retrieves the latest...
singularity
Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...
kubernetes-goat
Kubernetes Goat ✨ The Kubernetes Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security 🚀 🙌 Refer to https://madhuakula.com/kubernetes-goat for the guide 📖 🧰 Setting up Kubernetes Goat Ensure you have admin access to the Kubernetes cluster...
cve-2018-11776
CVE-2018-11776 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-11776 Image author: https://github.com/knqyf263/CVE-2018-11776...
cloudfoxable
Start Hacking: CloudFoxable Read the blog for more details: Introducing CloudFoxable: A Gamified Cloud Hacking Sandbox Background CloudFox helps penetration testers and security professionals find exploitable attack paths in cloud infrastructure. However, what if you want to find and exploit...
mutillidae
OWASP Mutillidae II OWASP Mutillidae II es una aplicación web gratuita, de código abierto, deliberadamente vulnerable diseñada para entusiastas de la seguridad web. Sirve como objetivo para aprender y practicar habilidades de seguridad web. Mutillidae se puede instalar fácilmente en sistemas Linu...
GrafXploit
Automated Exploit Tool for Grafana CVE-2021-43798 Overview This project is an automated exploit tool designed to scan for and extract sensitive information from compromised Grafana instances vulnerable to CVE-2021-43798. The tool identifies vulnerable plugins and extracts SSH keys from compromise...