sadcloud

Sadcloud sadcloud es una herramienta para crear infraestructura AWS insegura con Terraform. Es compatible con aprox. 84 configuraciones incorrectas en 22 servicios de AWS. El conjunto inicial de configuraciones incorrectas se basó en ScoutSuite, la herramienta de auditoría multinube de NCCGroup...

sadcloud

Sadcloud sadcloud is a tool for spinning up insecure AWS infrastructure with Terraform. It supports approx. 84 misconfigurations across 22 AWS Services. The inital set of misconfigurations were drawn from ScoutSuite, NCCGroup's Multi-cloud auditing tool. sadcloud was created to easily allow...

vulnerable-java-app

Este repositorio no tiene un README...

Damn-Vulnerable-ML-Model

This repository does not have a README...

source-packages

source-packages Este repositorio almacena el código fuente de programas vulnerables para LinuxFlaw...

evil-mhyprot-cli

evil-mhyprot-cli 针对 Mhyprot2.sys 易受攻击驱动程序的 PoC，允许非特权用户进程在内核/用户态中读写内存。 libmhyprot Wiki 概述 通过此 CLI，我们可以执行以下操作： 从用户态以内核权限读写任意内核内存 从用户态以内核权限读写任意用户内存 按指定进程 ID 枚举多个模块 获取系统运行时间 枚举指定进程中的线程，结果允许我们直接从 CLI 读取内核中的 PETHREAD 结构。 通过易受攻击驱动程序上下文（ring-0）中调用的 ZwTerminateProcess 按进程 ID 终止指定进程。 所有操作均以内核级权限（ring-0）通过易...

WSGoat

WebSocket GOAT A deliberately vulnerable, Dockerized WebSocket application designed for learning and practicing WebSocket security testing in a controlled environment. The lab implements a realistic web application with authentication, private messaging, user profiles, and multiple WebSocket...

java-vulnerable

Consumidor de demostración para CVE-2016-0714 RCE de persistencia de sesión de Tomcat + CVE-2013-1814 divulgación de información de UserApi de Apache Rave más cuatro vulnerabilidades de OSS de Java de filter-padding. context.xml habilita PersistentManager → cadena de Tomcat ACTIVA;...

node-vulnerable

node-vulnerable Este repositorio es un objetivo de demostración sintético para Endor Labs EXPOSURE. El estado actual es deliberadamente explotable. EXPOSURE reportará un veredicto de explotable contra él. CVEs rastreados: CVE-2018-21268 — inyección de comandos en traceroute a través del argumento...

fix_CVE-2026-31431

fixCVE-2026-31431 Destroys the vulnerable components required by CVE-2026-31431, thereby preventing privilege escalation via CVE-2026-31431. Test script: https://github.com/rootsecdev/cve202631431/blob/main/testcve202631431.py Fix command: root@kitploit: wget -O fix.sh...

CVE-2026-1357-Lab

CVE-2026-1357 — WPvivid Backup & Migration Vuln vs Patched Docker Lab Local-only Docker lab for comparing WPvivid Backup & Migration: Vulnerable: 0.9.123 Patched: 0.9.124 Built for learning practice lab setup, verification, logs, notes. Anything PoC-related is intended to run only inside this lab...

CVE-2021-32157

CVE-2021-32157 Make it possible to build a vulnerable webmin virtual environment as a container using docker Build If there is an error related to download, please comment on line 15 of dockerfile and run line 14 of dockerfile. root@kitploit: docker build -t VulnWebmin . docker run --name...

CVE-2026-3304

CVE-2026-3304 Lab Environment For educational and research purposes only. Attacking systems without authorization is illegal. This lab environment was built by analyzing the Multer 2.1.0 patch and its official test code. The vulnerable server replicates the exact conditions described in the patch...

Demo_CVE-2025-3248

DemoCVE-2025-3248 — Educational PoC Purpose: Simulate the vulnerability CVE-2025-3248 in an isolated environment for information security learning: build a lab, observe exploitable behavior, and discuss mitigation measures. ⚠️ LEGAL & ETHICAL DISCLAIMER ETHICAL USE ONLY All content in this...

marshalsec

Java Unmarshaller Security - Turning your data into code execution If you came here for Log4Shell/CVE-2021-44228, you may want to read about the exploitation vectors and affected Java runtime versions: https://mbechler.github.io/2021/12/10/PSALog4ShellJNDIInjection/ Paper It's been more than two...

CVE-2025-0288

CVE-2025-0287 Este repositorio contiene una captura de pantalla de la función vulnerable identificada durante la ingeniería inversa de un controlador de Windows vulnerable. Descripción biontdrv.sysVul: versión vulnerable biontdrv.sysSecure: versión parcheada POCCVE-2025-0288.c: código de prueba d...

CVE-2020-11800

Sections required by the assignment guidelines are marked with “Required”. 1. Environment Required Dockerfile Required This environment uses a custom Dockerfile based on the vulnerable Zabbix Server image provided by Vulhub. root@kitploit: FROM vulhub/zabbix:3.0.3-server The Dockerfile builds a...

Helpdesk-Telecom-CVE-2025-64459

Preparación para la descarga del repositorio 1. Actualizamos los paquetes: sudo apt update 2. Si es necesario, instalar git: sudo apt install -y git 3. Es necesario configurar las reglas de redirección de puertos. En los ajustes de "Red" de la máquina Debian 12.11.0 hacer clic en "redirección de...

CVE-2025-68613-n8n-lab

CVE-2025-68613 Laboratorio local n8n Este repositorio proporciona una configuración sencilla de Docker Compose que ejecuta una instancia vulnerable de n8n para pruebas locales de CVE-2025-68613. Requisitos Docker Desktop o Docker Engine Docker Compose v2 Inicio rápido 1. Inicie el contenedor:...

CVE-2026-87052

A flaw was found in operator-foundry. The absence of automated dependency-update and vulnerability-scanning configurations in the repository increases the risk of undetected security vulnerabilities. This lack of automated security checks could potentially lead to the inclusion of known vulnerabl...