EUVD-2026-78016

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may disclose sensitive user information...

simple-maven

Damn Vulnerable C Application Solo API Primeros pasos Nota: Esta es una aplicación deliberadamente vulnerable; no la alojes en servidores de producción ni en servidores expuestos a Internet/públicos. Úsala con precaución. kk Docker test root@kitploit: docker-compose up tets Manual Instala el SDK ...

webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

iam-vulnerable

IAM 漏洞环境（IAM Vulnerable） 使用 Terraform 创建你自己的 AWS IAM 权限提升靶场 。 IAM 漏洞环境使用 Terraform 二进制文件和你的 AWS 凭证，在你选择的 AWS 账户中部署超过 250 个 IAM 资源。几分钟内，你就可以开始学习如何识别和利用允许权限提升的易受攻击 IAM 配置。 IAM 漏洞环境的“大哥”——CloudFoxable 大家好。IAM 漏洞环境对于理解 AWS IAM 权限提升的基本构建块仍然非常有用。然而，在制作 IAM 漏洞环境几年后，我创建了 CloudFoxable，这是一个 CTF...

CVE-2018-7600-Drupal-RCE

CVE-2018-7600 RCE en Drupal Créditos a: Archivo| Versión Drupal| Fuente| Comentario ---|---|---|--- poc0-curl.sh| 8| https://twitter.com/ibo0om/status/984674893768921089 https://twitter.com/IamSecurity/status/984977193565646848 https://gist.github.com/g0tmi1k/7476eec3f32278adc07039c3e5473708|...

mutillidae

OWASP Mutillidae II OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application designed for web-security enthusiasts. It serves as a target for learning and practicing web security skills. Mutillidae can be easily installed on Linux and Windows systems using LAMP, WAMP, a...

log4shell

log4shell Script en Python para escanear el sistema de archivos del servidor en busca de archivos JAR de log4j que sean vulnerables a CVE-2021-44228 y CVE-2021-45046. El script recorre recursivamente el sistema de archivos incluyendo zip, ear, war para encontrar versiones de log4j 2. hasta 2.15 c...

pagodo

pagodo - Passive Google Dork Introduction pagodo automates Google searching for potentially vulnerable web pages and applications on the Internet. It replaces manually performing Google dork searches with a web GUI browser. There are 2 parts. The first is ghdbscraper.py that retrieves the latest...

ninjasworkout

Damn Vulnerable NodeJS Application 快速开始 root@kitploit: Download the Repo = run npm i 安装所有依赖后，运行应用程序 root@kitploit: node app.js or nodemon app.js 已添加的漏洞 原型污染 ✅1 No SQL注入 ✅2 跨站脚本 ✅3 访问控制失效 ✅4 会话管理失效 ✅5 正则表达式实现薄弱 ✅6 竞争条件 ✅7 CSRF -跨站请求伪造 ✅8 暴力破解保护薄弱 ✅9 用户枚举 ✅10 重置密码令牌在Referrer中泄露 ✅11 重置密码漏洞 ✅12 敏感数据暴...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...

DVSA

una aplicación serverless deliberadamente vulnerable Damn Vulnerable Serverless Application DVSA es una aplicación deliberadamente vulnerable que pretende ser una ayuda para que los profesionales de la seguridad pongan a prueba sus habilidades y herramientas en un entorno legal, ayudar a los...

retire.js

Retire.js Lo que requieres, también debes retirarlo Hay una gran cantidad de librerías JavaScript disponibles para usar en la Web y en aplicaciones Node.JS. Esto simplifica enormemente el desarrollo, pero debemos mantenernos al día con los parches de seguridad. "Uso de componentes con...

singularity

Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...

DanderSpritz_lab

Laboratorio DanderSpritz Propósito El objetivo del laboratorio DanderSpritz es permitir a investigadores y defensores configurar rápidamente una versión completamente funcional de DanderSpritz - El conjunto de herramientas de post-explotación del Equation Group y un dominio Windows Server 2008 y ...

svja

svja The RDPS Super Vulnerable Java Application is just that -- a super vulnerable java application created for the benefit of all to see a variety of common, often "complex", vulnerabilities. This software was created as part of the Roniel and DaRon Podcast Show...

BYOVD-Research

Overview This is an older driver that was recently exploited in a BYOVD campaign detailed here: https://www.bleepingcomputer.com/news/security/edr-killer-tool-uses-signed-kernel-driver-from-forensic-software/ The exploit path is as follows: 1. The attacker's program runs as admin and gets its own...

metasploitable3

Metasploitable3 Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit. Metasploitable3 is released under a BSD-style license. See COPYING for more details. Quick-start To...

metasploitable3

Metasploitable3 Metasploitable3 是一个从头构建、包含大量安全漏洞的虚拟机。它旨在作为使用 metasploit 测试漏洞利用的目标。 Metasploitable3 以 BSD 风格许可证发布。更多详情请参阅 COPYING 文件。 快速开始 要使用 https://app.vagrantup.com/rapid7/ 提供的预构建镜像，请创建一个新的本地 metasploitable 工作区： Linux 用户： root@kitploit: mkdir metasploitable3-workspace cd...

AzureGoat

AzureGoat：一个极易受攻击的Azure基础设施 攻陷组织的云基础设施对攻击者来说就像坐在金矿上。有时，一个简单的配置错误或Web应用程序中的漏洞，就足以让攻击者攻陷整个基础设施。由于云相对较新，许多开发者并未完全意识到威胁形势，最终部署了脆弱的云基础设施。Microsoft Azure云已成为云基础设施提供商中市场份额第二大的厂商（根据多份报告），仅次于AWS。安全专业人员有大量针对AWS的工具和易受攻击的应用程序来进行攻击/防御实践，但Azure的情况并非如此。社区可用的选项要少得多。 AzureGoat是一个在Azure上设计为易受攻击的基础设施，涵盖了最新发布的OWASP...

dnsFookup

DnsFookup v 2.0.1 一个包含以下组件的DNS Rebinding框架： 显然一个DNS服务器 Python Web API，用于创建新子域名、控制DNS服务器、查看日志等功能 一个简陋的React应用，使其更舒适 更新日志 API文档 它有什么作用？ 它可以让你创建像Burp Collaborator一样的DNS bins，但它增加了一些额外功能... 你可以指定创建的子域名解析到哪些IP/域名以及解析次数，目前支持 A、CNAME和AAAA记录 然后你可以在日志中查看请求来源、解析结果等 工具运行视频 漏洞应用程序的来源是...