Pre-Built Vulnerable Environments Based on Docker-Compose

CVE 2021-21315 PoC

CVE-2020-28502 node-XMLHttpRequest RCE

PoC of Backend HTTP Socket Poisoning, via HTTP Smuggling, presented in CVE-2019-15605

PoC RCE Log4j CVE-2021-4428 para pruebas

Apache Log4j 远程代码执行

A Remote Code Execution PoC for Log4Shell (CVE-2021-44228)

CVE-2019-12814:Jackson JDOM XSLTransformer Gadget

Exploit PoC for Spring RCE issue (CVE-2011-2894)

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST),…

PoC for CVE-2018-12086 affecting various OPC UA stacks

shiro-cve-2020-17523 漏洞的两种绕过姿势分析（带漏洞环境）

CVE-2020-24750

CVE-2020-10673:jackson-databind RCE

This is a simple test for FasterXML jackson-databind

XStream DoS CVE-2021-21341

CVE-2020-26258 && XStream SSRF

intentionally vuln web Application Security in django

Environment for CVE_2019_17571

PoC for CVE-2016-1000027

Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penet…

CodeQL Running on an insecure Kotlin app

A deliberately insecure Java web application

For an introductory tutorial on how to use Jenkins to build a simple Java application with Maven.

CVE-2020-11113:Jackson-databind RCE

A simple Hello World Spring Boot application

OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar

this is sample program to show how to use log4j for logging in java program