hardening-k8s-containers

تطبيق تدوين الملاحظات ضعيف الأمان بشكل متعمد يحتوي هذا المستودع على تطبيق بسيط جدًا وضعيف الأمان يُستخدم لتوضيح الاختلافات بين نشر هذا التطبيق بالإعدادات الافتراضية على مجموعة Kubernetes، مقابل إضافة بعض الإعدادات الأمنية الإضافية التي لن تصلح ثغرات التطبيق، ولكنها ستحد من قدرة المهاجم على فعل...

Log4j

1.एक नमूना कमजोर एप्लिकेशन बनाएं . 2.एक netcat लिस्नर शुरू करें . 3.एक्सप्लॉइट चलाएं . 5.बेहतर परिणामों के लिए jdk1.8.020 का उपयोग करें . Exploit-db - https://www.exploit-db.com/exploits/50592...

frida

frida This repository contains various Frida scripts for Android application penetration testing. I created this project to demonstrate the capabilities of the Frida dynamic-analysis framework. You can read my "Introduction to Frida" blog post on Medium, where I'm explaining how to use Frida with...

dnsFookup

DnsFookup v 2.0.1 DNS Rebinding freamwork containing: a dns server obviously python web api to create new subdomains and control the dns server, view logs, stuff like that shitty react app to make it more comfy Changelog API documentation What does it do? It lets you create dns bins like a burp...

CVE-2023-38646

CVE-2023-38646 كود للكشف/استغلال تطبيق metabase الضعيف...

NodeGoat

NodeGoat نظرًا لكون Node.js خفيفة الوزن وسريعة وقابلة للتوسع، فقد أصبحت منصة معتمدة على نطاق واسع لتطوير تطبيقات الويب. يوفر هذا المشروع بيئة لتعلم كيفية تطبيق مخاطر OWASP Top 10 الأمنية على تطبيقات الويب المطورة باستخدام Node.js وكيفية معالجتها بفعالية. البدء OWASP Top 10 لتطبيقات الويب Node.js:...

log4j2-CVE-2021-44228

Exemple d'application vulnérable Log4j2 CVE-2021-44228 Versions affectées : toutes les versions de 2.0-beta9 à 2.14.1 Cette application est basée sur une application web Spring Boot vulnérable à CVE-2021-44228. Elle utilise Log4j 2.14.1 via spring-boot-starter-log4j2 2.6.1. Exécution de...

CVE-2024-46507

The script was tested and built on Ubuntu Server 20.04 LTS, while Kali Linux was used for exploitation and walkthrough. This walkthrough guides you through exploiting the vulnerable server containing CVE-2024-46507 command injection and CVE-2024-46508 authentication bypass vulnerabilities. Initia...

Vanna - SQL injection

Vanna v0.3.4 is vulnerable to SQL injection in its DuckDB integration exposed to its Flask Web APIs. Attackers can inject malicious SQL training data and generate corresponding queries to write arbitrary files on the victim's file system, such as backdoor.php with contents . This can lead to...

Helpdesk-Telecom-CVE-2025-64459

Preparing to download the repository 1. Update packages: sudo apt update 2. If necessary, install git: sudo apt install -y git 3. It is necessary to set up port forwarding rules. In the "Network" settings of the Debian 12.11.0 machine, click "Port Forwarding". 4. Add a rule: Name: Django; Protoco...

Exploit for Improper Input Validation in Python

CVE-2023-24329 — Parser Differential Lab Educational use...

SQLite-Injection-Lab

آزمایشگاه تزریق SQL SQL Injection Lab یک محیط آموزشی جامع ب...

xss-lab-hack-v1

🎯 Laboratorio XSS - Práctica de Pentesting Un entorno complet...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

log4j-shell-poc A Proof-Of-Concept for the recently found CVE-...

Exploit for Out-of-bounds Write in Php

Task Management APP CVE-2019-11043 Lab Minimal PHP app with...

Exploit for CVE-2025-49113

Roundcube RCE Lab CVE-2025-49113 !Open in GitHub Codespac...

Exploit for CVE-2025-49113

Roundcube RCE Lab CVE-2025-49113 !Open in GitHub Codespac...

Exploit for CVE-2025-4664

CVE-2025-4664 This repository contains a PoC for exploiting CV...

CVE-2025-26198

CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component. The application fails to sanitize user-supplied input in the admin login form before directly including it in SQL queries. This allows unauthenticated attackers to inject arbitrary...

CVE-2025-20954

Use of implicit intent for sensitive communication in EnrichedCall prior to SMR May-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability...