No description available

From Zero To Hero

purplestorm writeup collection

vulnlab.com reaper writeup

Scripts to control an "OSCP-like" lab environment.

docker-compose bringing up multiple vulnerable applications inside containers.

A simple vulnerable webapp created by PHP

No description available

Files, notes, and walkthroughs for a variety of web application security labs (HTB, VulnLab, etc.)

No description available

vvmlist is a list of vulnerable vms with key techniques used on them to solve.

Shellcode loader that I created to use for VulnLab's Shinra.

Terraform script to deploy vulnerable pentest lab on AWS.

Repo containing my dotfiles wrapped around an auto-installer script.

Intentionally Vulnerable Web App for Penetration Testing Practice

VulnLab is a modern, aesthetically pleasing web application designed to be **intentionally vulnerable**. It serves as a safe environment for developers and security enthusiasts to practice their skills in identifying and exploiting common web vulnerabilities (OWASP Top 10).

Free and open-source cross-platform web-focused security training environment

Lab vulnérble WP + Ninja forms CVE 2016-1209 (à ne pas mettre en production)

No description available

VulnLab is a collection of intentionally vulnerable web, desktop, and mobile apps for penetration testing and cybersecurity education. It provides a safe platform to practice real-world attack and defense techniques, covering various vulnerabilities and scenarios.

Z‑Vuln‑Lab is an intentionally vulnerable CTF-style lab designed for practicing real‑world web exploitation techniques, including SSTI, middleware authentication bypass, remote code execution, and container-based privilege escalation.

Application Node.js/Express intentionnellement vulnérable pour la formation cybersécurité. Inclut SQL Injection, Command Injection, SSRF, XSS, JWT Bypass et plus. Interface moderne avec documentation d'exploitation intégrée.

No description available

A modern Next.js vulnerable web app themed as a news / blog portal for CVE-2025-55182 (React) and CVE-2025-66478 (Next.js) to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3.

Flagrep is a simple tool for searching flags on Labs like Vulnlab & HackTheBox. It's available in both PowerShell and Bash.

No description available

A deliberately vulnerable web application mapped to real CVE-2025 vulnerabilities, developed for educational and academic purposes using Node.js, MySQL, Linux, and Apache.

Vulnlab Rtl Resources

A very silly vulnerable application to review your knowledge about basics of cybersecurity.

A collection of my VulnLab machine notes, exploitation steps, and detailed write-ups for cybersecurity learning and documentation.