CVE-2026-90455

A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...

CVE-2024-9796

CVE-2024-9797 Sitio web vulnerable a la CVE-2024-9796...

vulnerable-code-snippets

Fragmentos de código vulnerables Vulnerabilidades | Lenguajes de programación | Ejecutar un fragmento de código vulnerable | Instalación | Actualización YesWeHack presenta fragmentos de código que contienen varias vulnerabilidades diferentes para practicar tu análisis de código en un entorno...

rusty_drivers

RustyDrivers Este proyecto es una colección BYOVD centrada en eliminar procesos de EDR / AV. Actualmente se admiten los siguientes controladores:...

base-lamp

BASE-LAMP Esto es parte de Cved: una herramienta para gestionar contenedores docker vulnerables. Cved: https://github.com/git-rep-src/cved Fuente de la imagen: https://github.com/cved-sources/base-lamp Imagen basada en: https://github.com/Medicean/VulApps/tree/master/base/lamp...

base-joomla

BASE-JOOMLA This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/base-joomla Image based on: https://github.com/Medicean/VulApps/tree/master/base/joomla/3.7...

InjuredAndroid

InjuredAndroid - CTF A vulnerable Android application with ctf examples based on bug bounty findings, exploitation concepts, and pure creativity. Now available on Google Play! https://play.google.com/store/apps/details?id=b3nac.injuredandroid Setup for a physical device 1. Download the latest...

portSpider

██████╗ ██████╗ ██████╗ ████████╗███████╗██████╗ ██╗██████╗ ███████╗██████╗ ██╔══██╗██╔═══██╗██╔══██╗╚══██╔══╝██╔════╝██╔══██╗██║██╔══██╗██╔════╝██╔══██╗ ██████╔╝██║ ██║██████╔╝ ██║ ███████╗██████╔╝██║██║ ██║█████╗ ██████╔╝ ██╔═══╝ ██║ ██║██╔══██╗ ██║ ╚════██║██╔═══╝ ██║██║ ██║██╔══╝ ██╔══██╗ ██║...

hackazon

Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...

EDRSandblast-GodFault

EDRSandblast-GodFault By Gabriel Landau at Elastic Security. Modification of EDRSandblast - see original README below. Integrates GodFault into EDR Sandblast, achieving the same result without the use of any vulnerable drivers. Example Output root@kitploit:...

terrascan

⚠️ Archived This project is no longer maintained. The repository is archived and no further updates, issues, or pull requests will be accepted. Feel free to fork it if you'd like to continue development...

PT-2026-90524

A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...

BadRentdrv2

BadRentdrv2 A vulnerable driver exploited by me BYOVD that is capable of terminating several EDRs and antivirus software in the market, rendering them ineffective, working for both x32 and x64. How does it work? Compile targeting the legacy x32 architecture for a wider attack range. In an elevate...

CVE-2017-9798

Check for CVE-2017-9798 This small script checks a shared hosting environment for CVE-2017-9798 and exits with a return code of 1 if a vulnerable .htaccess file has been found. Example usage root@kitploit: python check.py --path /var/customers/webs/...

DeliberatelyVulnerableWebApp

Aplicación web deliberadamente vulnerable Struts 2 Este proyecto es una aplicación web Java que utiliza el framework Struts 2. Está construido con Maven y se puede ejecutar usando el servidor Jetty. Requisitos previos Kit de desarrollo de Java JDK 8 o superior Apache Maven 3.6.0 o superior Cómo...

SecGen

EL DESARROLLO SE HA MOVIDO A http://github.com/cliffe/SecGen/, ¡ESTE REPO NO SE MANTIENE Y PROBABLEMENTE NO FUNCIONARÁ! Generador de Escenarios de Seguridad SecGen Resumen SecGen crea máquinas virtuales vulnerables para que los estudiantes puedan aprender técnicas de pruebas de penetración en...

cve-2019-5420

CVE-2019-5420 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2019-5420 Image author: https://github.com/knqyf263/CVE-2019-5420...

SNet

SNet 日本語版はこちら / Japanese version A CTF where you use AI to capture the flag. No pentesting experience? No problem. Claude Code acts as your personal trainer — it sets up the environment, teaches you the tools, and guides you through real attack techniques step by step. You type every command...

App-vulnerable

This repository does not have a README...

sadcloud

Sadcloud sadcloud is a tool for spinning up insecure AWS infrastructure with Terraform. It supports approx. 84 misconfigurations across 22 AWS Services. The inital set of misconfigurations were drawn from ScoutSuite, NCCGroup's Multi-cloud auditing tool. sadcloud was created to easily allow...