CVE-2022-29078

CVE-2022-29078 ejs 3.1.6 docker vulnérable Installation root@kitploit: git clone https://github.com/miko550/CVE-2022-29078.git cd CVE-2022-29078 docker build . -t miko/vuln-ejs docker run -p 49160:8080 -d --name vuln-ejs miko/vuln-ejs Utilisation root@kitploit: http://127.0.0.1:49160/ Exploitatio...

grype

Grype A vulnerability scanner for container images and filesystems...

maigret

Maigret English · 简体中文 Maigret collects a dossier on a person by username only , checking for accounts on a huge number of sites and gathering all the available information from web pages. No API keys required. AI profiling demo. Sponsors IPcook provides reliable residential proxies for online...

cve-2019-5736-exp

cve-2019-5736-exp هذا دليل إثبات المفهوم PoC لاستغلال الثغرة CVE-2019-5736 في runc، بيئة التشغيل المستخدمة في Docker. إخلاء مسؤولية لقد قمت بهذا المشروع كتمرين، لأسباب تعليمية وللمتعة. ومن البديهي أنني لا أدعم إساءة استخدام هذا الكود بشكل غير أخلاقي و/أو غير قانوني. الوصف تم اكتشاف الثغرة بواسطة...

CVE-2021-41773S

صور Docker القابلة للاختراق لثغرة CVE-2021-41773 لتجاوز المسار في Apache تنطبق هذه الثغرة فقط على الإصدار 2.4.49 الذي يحتوي على إعدادات غير افتراضية محددة. في حالات معينة، يمكن أن يؤدي ذلك إلى قراءة ملفات أو تنفيذ كود. https://twitter.com/ptswarm/status/1445376079548624899 إعداد قراءة الملفات...

CVE-2021-41773-PoC

CVE-2021-41773-PoC CVE-2021-41773 के लिए PoC, docker के साथ प्रदर्शित करने हेतु चलाएँ बस ./poc.sh चलाएँ। सुनिश्चित करें कि आपके पास कार्यशील docker और docker-compose हैं root@kitploit: $ ./poc.sh Creating network "cve-2021-41773-pocdefault" with the default driver Creating cve-2021-41773-pocweb1...

offensive-docker-vps

Offensive Docker VPS Crie uma VPS no Google Cloud Platform ou Digital Ocean facilmente para usar Offensive Docker e inicie as avaliações nos alvos. 🎉🎉Bônus Digital Ocean 🎉🎉 Você pode se inscrever com meu link de referência https://m.do.co/c/0d2d40f6a8a1 e ganhar $100 de crédito grátis para testar...

Spring4Shell-POC

Aplicação PoC do Spring4Shell Esta é uma aplicação dockerizada que é vulnerável à vulnerabilidade Spring4Shell CVE-2022-22965. O código fonte Java completo para o war é fornecido e modificável, o war será reconstruído sempre que a imagem docker for construída. O WAR construído será então carregad...

xss_vulnerability_challenges

XSS Vulnerability Scenarios challenges This repository is a Dockerized php application containing some XSS vulnerability challenges. The ideas behind challenges are: Javascript validation bypass html entities bypass WAF bypass Black-list validation bypass Basic XSS validation bypass Double encode...

peetch

peetch peetch is a collection of tools aimed at experimenting with different aspects of eBPF to bypass TLS protocol protections. Currently, peetch includes three subcommands. The first called dump aims to sniff network traffic by associating information about the source process with each packet...

haaukins

Haaukins Haaukins é uma plataforma de virtualização altamente acessível e automatizada para educação em segurança, possui três componentes principais Docker, Virtualbox e Golang, a comunicação e orquestração entre os componentes é gerenciada usando a linguagem de programação Go. A principal razão...

web-hacking-playground

ملعب اختراق الويب الوصف ملعب اختراق الويب هو بيئة اختراق ويب خاضعة للتحكم. يتكون من ثغرات أمنية موجودة في حالات حقيقية، سواء في اختبارات الاختراق أو في برامج مكافآت الأخطاء. الهدف هو أن يتمكن المستخدمون من التدرب عليها، وتعلم اكتشافها واستغلالها. سيتم أيضًا معالجة مواضيع أخرى ذات أهمية، مثل: تجاو...

web-hacking-playground

Web Hacking Playground Description Web Hacking Playground is a controlled web hacking environment. It consists of vulnerabilities found in real cases, both in pentests and in Bug Bounty programs. The objective is that users can practice with them, and learn to detect and exploit them. Other topic...

docker-cve-2018-15473

Docker CVE-2018-15473 CVE-2018-15473 के विरुद्ध पेंटेस्ट टूल्स का परीक्षण करने के लिए एक सरल डॉकर root@kitploit: docker-compose build docker-compose up...

jackhammer

Jackhammer: One Security vulnerability assessment/management tool to solve all the security team problems. What is Jackhammer? Jackhammer is a collaboration tool built with an aim of bridging the gap between Security team vs dev team, QA team and being a facilitator for TPM to understand and trac...

hacktricks

HackTricks Logótipos e design de movimento do Hacktricks por @ppieranacho . Executar o HackTricks Localmente root@kitploit: Download latest version of hacktricks git clone https://github.com/HackTricks-wiki/hacktricks Select the language you want to use export LANG="master" Leave master for engli...

CVE-2024-5124

implantar servidor vítima: Instalar docker root@kitploit: Install packages required for the installation sudo apt-get update sudo apt install --yes ca-certificates curl sudo install -m 0755 -d /etc/apt/keyrings sudo curl -fsSL https://download.docker.com/linux/debian/gpg -o...

neko

n.eko Bem-vindo ao Neko, um navegador virtual auto-hospedado que roda em Docker e utiliza tecnologia WebRTC. O Neko é uma ferramenta poderosa que permite executar um navegador totalmente funcional em um ambiente virtual , dando a você a capacidade de acessar a internet de forma segura e privada d...

divd-2021-00038--log4j-scanner

divd-2021-00038--log4j-scanner Este scanner irá escanear recursivamente caminhos incluindo arquivos compactados para versões vulneráveis do log4j e arquivos org/apache/logging/log4j/core/lookup/JndiLookup.class. Atualmente, a lista de permissão define versões não exploráveis, neste caso log4j-cor...

epagneul

epagneul Epagneul एक उपकरण है जो विंडोज़ इवेंट लॉग को विज़ुअलाइज़ और जांच करने के लिए है। तैनाती Docker और docker-compose स्थापित होना आवश्यक है। स्थापना root@kitploit: make ऑफ़लाइन तैनाती इंटरनेट से जुड़ी मशीन पर, एक ऑफ़लाइन रिलीज़ बनाएँ: root@kitploit: make release यह एक release फ़ोल्डर बनाएगा...