CVE-2021-41773

CVE-2021-41773 Setup vulnerable enviornment...

cicd-goat

Deliberately vulnerable CI/CD environment. Hack CI/CD pipelines, capture the flags. 🚩 Created by Cider Security Acquired by Palo Alto Networks. Table of Contents...

cve-2018-9208

CVE-2018-9208 이것은 Cved의 일부입니다: 취약한 Docker 컨테이너를 관리하는 도구입니다. Cved: https://github.com/git-rep-src/cved 이미지 소스: https://github.com/cved-sources/cve-2018-9208 이미지 작성자: https://github.com/lcashdol/Exploits/tree/master/CVE-2018-9208...

GOAD

GOAD v3 🔖 문서 : https://orange-cyberdefense.github.io/GOAD/ 설명 GOAD는 펜테스트 Active Directory LAB 프로젝트입니다. 이 랩의 목적은 펜테스터들이 일반적인 공격 기술을 연습할 수 있도록 즉시 사용 가능한 취약한 Active Directory 환경을 제공하는 것입니다. !CAUTION 이 랩은 매우 취약하므로, 환경 구축에 이 레시피를 재사용하지 말고 격리 없이 인터넷에 배포하지 마십시오이는 권장 사항이며, 사용에 따른 책임은 본인에게 있습니다. 이 저장소는 펜테...

base-lamp

BASE-LAMP This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/base-lamp Image based on: https://github.com/Medicean/VulApps/tree/master/base/lamp...

CVE-2021-32157

CVE-2021-32157 취약한 webmin 가상 환경을 docker를 사용하여 컨테이너로 구축할 수 있도록 합니다. 빌드 다운로드 관련 오류가 발생하면 dockerfile의 15번째 줄을 주석 처리하고 dockerfile의 14번째 줄을 실행하세요. root@kitploit: docker build -t VulnWebmin . docker run --name VulnWebmin -d --rm -p 10000:10000 VulnWebmin 로그인 root@kitploit: http://SERVERIP:10000 으로 이동...

Exploit for Incorrect Authorization in Cacti

SHELL-POC-CVE-2022-46169 A bash proof of concept of t...

Exploit for Deserialization of Untrusted Data in Apache Tomcat

CVE-2025-24813 Proof of Concept PoC script for CVE-2025-2481...

Exploit for CVE-2024-27448

MailDev 2.1.0 RCE Exploit CVE-2024-27448 MailDev 2 throu...

Exploit for Server-Side Request Forgery in Lobehub Lobe_Chat

CVE-2024-47066 ★ CVE-2024-47066 LobeChat SSRF PoC ★ Descr...

Exploit for Missing Authorization in Sonaar Mp3_Audio_Player_For_Music\,_Radio_\&_Podcast

CVE-2024-7856 ★ CVE-2024-7856 Arbitrary File deletion PoC ★...

Exploit for Cross-Site Request Forgery (CSRF) in Concretecms Concrete_Cms

CVE-2017-5638 Apache Struts 2 RCE Proof of Concept This repos...

Exploit for Improper Access Control in Joomla Joomla\!

Joomla-CVE-2023-23752 This Python implementation serves an edu...

CVE-2023-38035

A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration. Recent assessments: jheysel-r7 at...

vulhub

It is an open-source collection of pre-built vulnerable docker environments. The primary vulnerability is a Server-Side Template Injection SSTI vulnerability in a Flask application. The repository contains a Docker Compose file that sets up a vulnerable environment for testing and demonstration...

Dockerfiles

This repository is a collection of Dockerfiles for CTF Capture The Flag challenges running on SniperOJ. The Dockerfiles are used to build a vulnerable environment for the challenges, which can be solved by participants. The repository contains various challenges, including web-based and pwn...

Exploit for Improper Input Validation in Redhat Openshift

This is a pre-built vulnerable environment based on Docker-Compose, maintained by Vulhub. The repository contains a collection of vulnerable environments for testing and training purposes. The environments are designed to be easy to use and require no prior knowledge of Docker. The repository...

vulhub

It is an open-source collection of pre-built vulnerable docker environments. The primary vulnerability is a Flask SSTI Server-Side Template Injection vulnerability. The target product/service is Flask, a Python web framework. The vulnerability class/vector is SSTI. The probable entry point is the...

CORS-Vulnerable-Lab: with COSR configuration error related to the vulnerability code range-vulnerability warning-the black bar safety net

This repository contains the CORS configuration error related to the vulnerable code. You can be on the local machine to configure the vulnerable code, and to the actual use of the CORS related error configuration issue. In this case, I would first like to thank@albinowax, the AKReddy, And Vivek...

ncu-ad-course-2017-pwn

This repository is an offensive tool for a Capture The Flag CTF challenge. It contains a series of pwn tasks created by the author for the NCU A&D course. The tasks are designed to test the participants' skills in exploiting vulnerabilities and bypassing security measures. The repository includes...