GOAD

GOAD v3 🔖 Documentazione : https://orange-cyberdefense.github.io/GOAD/ Descrizione GOAD è un progetto di laboratorio Active Directory per il pentest. Lo scopo di questo laboratorio è fornire ai pentester un ambiente Active Directory vulnerabile, pronto all'uso, per esercitarsi con le tecniche di...

base-lamp

BASE-LAMP Questo fa parte di Cved: uno strumento per gestire container Docker vulnerabili. Cved: https://github.com/git-rep-src/cved Immagine sorgente: https://github.com/cved-sources/base-lamp Immagine basata su: https://github.com/Medicean/VulApps/tree/master/base/lamp...

CVE-2021-41773

CVE-2021-41773 Configura ambiente vulnerabile...

CVE-2021-32157

CVE-2021-32157 Rendere possibile la creazione di un ambiente virtuale webmin vulnerabile come container utilizzando docker Build Se si verifica un errore relativo al download, si prega di commentare la riga 15 del dockerfile ed eseguire la riga 14 del dockerfile. root@kitploit: docker build -t...

cve-2018-9208

CVE-2018-9208 Questa è una parte di Cved: uno strumento per gestire container Docker vulnerabili. Cved: https://github.com/git-rep-src/cved Sorgente dell'immagine: https://github.com/cved-sources/cve-2018-9208 Autore dell'immagine: https://github.com/lcashdol/Exploits/tree/master/CVE-2018-9208...

cicd-goat

Deliberately vulnerable CI/CD environment. Hack CI/CD pipelines, capture the flags. 🚩 Created by Cider Security Acquired by Palo Alto Networks. Table of Contents...

Exploit for Incorrect Authorization in Cacti

SHELL-POC-CVE-2022-46169 A bash proof of concept of t...

Exploit for Deserialization of Untrusted Data in Apache Tomcat

CVE-2025-24813 Proof of Concept PoC script for CVE-2025-2481...

Exploit for CVE-2024-27448

MailDev 2.1.0 RCE Exploit CVE-2024-27448 MailDev 2 throu...

Exploit for Server-Side Request Forgery in Lobehub Lobe_Chat

CVE-2024-47066 ★ CVE-2024-47066 LobeChat SSRF PoC ★ Descr...

Exploit for Missing Authorization in Sonaar Mp3_Audio_Player_For_Music\,_Radio_\&_Podcast

CVE-2024-7856 ★ CVE-2024-7856 Arbitrary File deletion PoC ★...

Exploit for Cross-Site Request Forgery (CSRF) in Concretecms Concrete_Cms

CVE-2017-5638 Apache Struts 2 RCE Proof of Concept This repos...

Exploit for Improper Access Control in Joomla Joomla\!

Joomla-CVE-2023-23752 This Python implementation serves an edu...

CVE-2023-38035

A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration. Recent assessments: jheysel-r7 at...

vulhub

It is an open-source collection of pre-built vulnerable docker environments. The primary vulnerability is a Server-Side Template Injection SSTI vulnerability in a Flask application. The repository contains a Docker Compose file that sets up a vulnerable environment for testing and demonstration...

Dockerfiles

This repository is a collection of Dockerfiles for CTF Capture The Flag challenges running on SniperOJ. The Dockerfiles are used to build a vulnerable environment for the challenges, which can be solved by participants. The repository contains various challenges, including web-based and pwn...

Exploit for Improper Input Validation in Redhat Openshift

This is a pre-built vulnerable environment based on Docker-Compose, maintained by Vulhub. The repository contains a collection of vulnerable environments for testing and training purposes. The environments are designed to be easy to use and require no prior knowledge of Docker. The repository...

vulhub

It is an open-source collection of pre-built vulnerable docker environments. The primary vulnerability is a Flask SSTI Server-Side Template Injection vulnerability. The target product/service is Flask, a Python web framework. The vulnerability class/vector is SSTI. The probable entry point is the...

CORS-Vulnerable-Lab: with COSR configuration error related to the vulnerability code range-vulnerability warning-the black bar safety net

This repository contains the CORS configuration error related to the vulnerable code. You can be on the local machine to configure the vulnerable code, and to the actual use of the CORS related error configuration issue. In this case, I would first like to thank@albinowax, the AKReddy, And Vivek...

ncu-ad-course-2017-pwn

This repository is an offensive tool for a Capture The Flag CTF challenge. It contains a series of pwn tasks created by the author for the NCU A&D course. The tasks are designed to test the participants' skills in exploiting vulnerabilities and bypassing security measures. The repository includes...