hardening-k8s-containers

Intentionally Vulnerable Note Taking Application This repository contains a very simple and vulnerable application used to demonstrate the differences between deploying this application with the default settings to a Kubernetes cluster, versus adding some extra security settings that WILL NOT fix...

CVE-2024-46507

The script was tested and built on Ubuntu Server 20.04 LTS, while Kali Linux was used for exploitation and walkthrough. This walkthrough guides you through exploiting the vulnerable server containing CVE-2024-46507 command injection and CVE-2024-46508 authentication bypass vulnerabilities. Initia...

frida

frida This repository contains various Frida scripts for Android application penetration testing. I created this project to demonstrate the capabilities of the Frida dynamic-analysis framework. You can read my "Introduction to Frida" blog post on Medium, where I'm explaining how to use Frida with...

Vanna - SQL injection

Vanna v0.3.4 is vulnerable to SQL injection in its DuckDB integration exposed to its Flask Web APIs. Attackers can inject malicious SQL training data and generate corresponding queries to write arbitrary files on the victim's file system, such as backdoor.php with contents . This can lead to...

Log4j

1.创建一个示例漏洞应用程序。 2.启动一个netcat监听器。 3.运行漏洞利用程序。 5.使用jdk1.8.020以获得更好的结果。 Exploit-db - https://www.exploit-db.com/exploits/50592...

NodeGoat

NodeGoat 由于轻量、快速且可扩展，Node.js 正成为开发 Web 应用程序的广泛采用平台。本项目提供了一个环境，用于学习 OWASP Top 10 安全风险如何适用于使用 Node.js 开发的 Web 应用程序，以及如何有效解决这些风险。 开始使用 适用于 Node.js Web 应用程序的 OWASP Top 10： 了解它！ 此应用程序附带了一个教程页面，解释了 OWASP Top 10 漏洞以及如何修复它们。 一旦应用程序运行，您可以在 http://localhost:4000/tutorial（或您配置的端口）访问教程页面。 实践它！ 为忍者打造的易受攻击...

dnsFookup

DnsFookup v 2.0.1 DNS Rebinding freamwork containing: a dns server obviously python web api to create new subdomains and control the dns server, view logs, stuff like that shitty react app to make it more comfy Changelog API documentation What does it do? It lets you create dns bins like a burp...

Helpdesk-Telecom-CVE-2025-64459

Preparing to download the repository 1. Update packages: sudo apt update 2. If necessary, install git: sudo apt install -y git 3. It is necessary to set up port forwarding rules. In the "Network" settings of the Debian 12.11.0 machine, click "Port Forwarding". 4. Add a rule: Name: Django; Protoco...

log4j2-CVE-2021-44228

Sample Log4j2 vulnerable application CVE-2021-44228 Versions Affected: all versions from 2.0-beta9 to 2.14.1 This application is based on Spring Boot web application vulnerable to CVE-2021-44228 It uses Log4j 2.14.1 through spring-boot-starter-log4j2 2.6.1. Running the application Run it:...

CVE-2023-38646

CVE-2023-38646 Code to detect/exploit vulnerable metabase application...

Exploit for Improper Input Validation in Python

CVE-2023-24329 — Parser Differential Lab Educational use...

SQLite-Injection-Lab

آزمایشگاه تزریق SQL SQL Injection Lab یک محیط آموزشی جامع ب...

xss-lab-hack-v1

🎯 Laboratorio XSS - Práctica de Pentesting Un entorno complet...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

log4j-shell-poc A Proof-Of-Concept for the recently found CVE-...

Exploit for Out-of-bounds Write in Php

Task Management APP CVE-2019-11043 Lab Minimal PHP app with...

Exploit for CVE-2025-49113

Roundcube RCE Lab CVE-2025-49113 !Open in GitHub Codespac...

Exploit for CVE-2025-49113

Roundcube RCE Lab CVE-2025-49113 !Open in GitHub Codespac...

Exploit for CVE-2025-4664

CVE-2025-4664 This repository contains a PoC for exploiting CV...

CVE-2025-26198

CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component. The application fails to sanitize user-supplied input in the admin login form before directly including it in SQL queries. This allows unauthenticated attackers to inject arbitrary...

CVE-2025-20954

Use of implicit intent for sensitive communication in EnrichedCall prior to SMR May-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability...