13263 matches found
neko-master
Neko Master See your network traffic clearly. Real-time monitoring Β· Traffic auditing Β· Multi-gateway support English | δΈζ !IMPORTANT Disclaimer This project is a traffic analysis and visualization tool for local gateway environments. It does not provide any network access service, proxy...
React2Shell
React2Shell CVE-2025-55182 Scanner & Exploit Toolkit for Next.js/React Server Components RCE. Repository Structure React2Shell/ βββ browser-extension/ Chrome extension for browser-based detection β βββ manifest.json β βββ content.js β βββ popup.html/js β βββ background.js βββ cli/ Command-line...
php-app-race-condition
Vulnerable PHP App Race Condition Environment setup: docker-compose up Environment verification: Connection Test: http://localhost/test.php Vulnerable endpoint: http://localhost/poc.php Race condition exploit: echo http://localhost | nuclei -t race.yml Observe that less than 1280$ were accounted...
go-pillage-registries
go-pillage-registries This project takes a Docker registry and pillages the manifest and configuration for each image in its catalog. It uses Google's crane command's package, which should follow docker's keychain semantics. If you would like to override this, just change authn.DefaultKeychain as...
CVE-2026-1312-Testing
CVE-2026-1312 Reproduction Clone the Repository Setup Requirements: Python 3.12 installed Docker Desktop installed and running Run the Script ./runcve20261312.sh Files runcve20261312.sh Main execution script docker-compose.yml Docker configuration .dockerfile Docker image setup requirements.txt...
osint-menace
Installed addon integration Restore the exact upstream sources before building from a clean checkout: python3 addons/fetch.py docker compose up -d --build Open http://localhost:8088/addons. All twelve sources are pinned by commit in manifest.json, with their original licenses in sources//...
dirtypipe-ebpf_detection
dirtypipe-ebpfdetection -- Dirtypipe detection tool This program was made to detect Dirty Pipe exploitation attempts thanks to eBPF. It also monitors nonvulnerable kernels and docker containers. π« If you want more details on how it works please read the blog post ! π¬ How does it works? Default...
otto-support
Otto Support Customer support MCP server for AI coding assistants. One Go binary, tiered authentication, 19 tools across 4 role levels. Built with mcp-go. Quick Start Option A: Docker container recommended Run everything in an isolated container. Claude Code is pre-installed and the MCP server...
CVE-2022-0492-Container-Escape
CVE-2022-0492-Container-Escape CVE-2022-0492-Container-Escape Implemented in Go Reference links: https://github.com/chenaotian/CVE-2022-0492 https://blog.trailofbits.com/2019/07/19/understanding-docker-container-escapes/...
dockerevil
dockerevil A simple repository to store my security flaws in the docker technology 2016 - 2017 Docker API Privilege EscalationLPE/RPE Escalate from Offline Server/Minimal Images/Build from TAR Dockerfile Docker SUDO Privilege Escalation PoC Nmap Scripts 2019 CodeStudent1995 Based Exploit OpenShif...
CVE--2026-24061
CVE-2026-24061 CVE-2026-24061 nlss/xinetd docker inetutils JayGLXR CVE-2026-24061 PoC...
FLAWED
F ix L ike A rtifacts w ith E mbedded D efects A research harness for measuring how well AI agents patch vulnerabilities. Quickstart Β· Datasets Β· Documentation Β· Security model Β· Contributing FLAWED checks out an open-source project at a known-vulnerable commit, hands an AI agent a description of...
WannaRace
π WannaRace WebApp intentionally made vulnerable to Race Condition π€ Description Race Condition vulnerability can be practiced in the developed WebApp. Task is to buy a Mega Box using race condition that costs more than available vouchers. Two challenges are made for practice. Challenge B is to b...
CVE-2021-4034
CVE-2021-4034 - Docker Container Deliberately Vulnerable Version Docker PoC for PwnKit: Local Privilege Escalation Vulnerability in polkitβs pkexec CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...
CVE-2020-11800
Sections required by the assignment guidelines are marked with βRequiredβ. 1. Environment Required Dockerfile Required This environment uses a custom Dockerfile based on the vulnerable Zabbix Server image provided by Vulhub. FROM vulhub/zabbix:3.0.3-server The Dockerfile builds a local image usin...
botb
Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...
dvcsharp-api
Damn Vulnerable C Application API Only Getting Started Note: This is a deliberately vulnerable app, please do not host it on production or Internet/public facing servers. Use with caution. Docker docker-compose up Manual Install .NET Core 2.x SDK Microsoft .NET Core SDK Install dependencies and...
FACT
Forensic Artefact Collection Tool Overview FACT is a tool to collect, process and visualise forensic data from clusters of machines running in the cloud or on-premise. Deployment For a basic single-node deployment, we recommend using Docker and Docker Compose. First, read docker-compose.yaml for...
CVE-2025-9074
CVE-2025-9074: Docker Engine API Unauthenticated RCE Severity : CRITICAL | CVSS Score : 9.8 estimated | Affected Versions : Docker Desktop 4.44.3 A proof-of-concept exploit for CVE-2025-9074, an unauthenticated Remote Code Execution vulnerability in Docker Engine API that allows privileged...