JavaSecLab is a comprehensive Java vulnerability platform｜ JavaSecLab是一款综合型Java漏洞平台，提供相关漏洞缺陷代码、修复代码、漏洞场景、审计SINK点、安全编码规范，覆盖多种漏洞场景，友好用户交互UI……
Node.js vulnerability labs
Non-destructive detector + Docker lab for wp2shell (CVE-2026-63030 REST /batch/v1 route confusion + CVE-2026-60137 author__not_in SQLi) in WordPress core 6.9.0-6.9.4 / 7.0.0-7.0.1
Provide a collection of deliberately vulnerable APIs along with corresponding challenges to help enhancing their skills in identifying, exploiting, and securing API vulnerabilities.
本项目基于 Docker 搭建了一个用于复现和测试 sudo 本地权限提升漏洞 CVE-2025-32463 的实验环境。
Full-stack offensive security lab with a vulnerable Flask app, automated attack/recon modules, and reporting.
AltaySec platformu için geliştirilmiş, sunucu taraflı şablon enjeksiyonu (SSTI) zafiyetlerini ve sömürme tekniklerini uygulamalı olarak gösteren laboratuvar çalışması.
Banking cybersecurity pentest simulation lab — fictional bank with intentionally vulnerable modules for OWASP Top 10 training. Education only.
Pikachu enhanced Web security lab with JWT, CORS, Clickjacking, Session Fixation, Host Header and Docker Lab.
A lab on the basic security checks to be implemented and a frontend to see its working
Controlled NGINX HTTP/2 frame injection lab for CVE-2026-42926 patch validation and defensive research
Custom vulnerable VM (Ubuntu 14.04) designed for teaching multi-stage penetration testing. Features 10 interconnected challenges across Forensics, Web Exploitation (SQLi, XSS), Cryptography, and Kernel Exploitation (OverlayFS/CVE-2015-1328) to achieve full root compromise.
Automated Vulnerable Active Directory Lab inspired by OSCP-style enumeration and exploitation.
Add a description, image, and links to the vulnerability-lab topic page so that developers can more easily learn about it.
To associate your repository with the vulnerability-lab topic, visit your repo's landing page and select "manage topics."