13266 matches found
DockerSpy
DockerSpy DockerSpy searches for images on Docker Hub and extracts sensitive information such as authentication secrets, private keys, and more. What is Docker? Docker is an open-source platform that automates the deployment, scaling, and management of applications using containerization...
mediator
Mediator is an end-to-end encrypted reverse shell in which the operator and the shell connect to a "mediator" server that bridges the connections. This removes the need for the operator/handler to set up port forwarding in order to listen for the connection. Mediator also allows you to create...
cve-2015-8103
CVE-2015-8103 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2015-8103 Image author: https://github.com/Medicean/VulApps/tree/master/j/jboss/1...
CVE-2019-19356
CVE-2019-19356 cd CVE-2019-19356 docker-compose up -d...
cve-2017-5638
cve-2017-5638 cve-2017-5638 Vulnerable site sample This project aims to demonstrate the CVE-2017-5638 exploitation for educational purpose. For more informations, see https://cwiki.apache.org/confluence/display/WW/S2-045 Legal Disclaimer This project is made for educational and ethical testing...
cve-2026-27483-lab
CVE-2026-27483 Lab - Enterprise Vulnerability Learning Environment A complete, realistic, enterprise-style Docker-based lab for learning, testing, and defending against CVE-2026-27483 MindsDB Path Traversal → RCE. This repository provides a deployable lab topology, configs, minimal container...
cve-2017-5941-poc-docker-lab
CVE-2017-5941 — node-serialize Untrusted Deserialization RCE PoC ⚠️ For lab / self-assessment only. Use only on systems you own or are authorized to test. This repository provides: A minimal PoC script to reproduce CVE-2017-5941 against a vulnerable Node.js app that uses node-serialize = 0.0.4. Tw...
openssl-fuzz
Fuzzing OpenSSL This repository has a companion blog post titled "Finding CVE-2022-3786 openssl with Mayhem" at https://www.seandeaton.com. tl;dr All of this is taken care of for you with the included Dockerfile also on DockerHub. You can run it like so: Build the container docker build --tag...
dnssearch
dnssearch This software is a subdomain enumeration tool. Purpose dnssearch takes an input domain -domain parameter and a wordlist -wordlist parameter , it will then perform concurrent DNS requests using the lines of the wordlist as sub domains eventually bruteforcing every sub domain available on...
cve-unassigned-1
CVE-UNASSIGNED-1 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-unassigned-1 Image author: https://github.com/cved-sources/cve-unassigned-1...
CVE-2025-49132
CVE-2025-49132 Standalone Vulnerability Scanner Non-Docker Implementation This scanner operates directly on Python without Docker dependencies, suitable for environments where Docker is not available or preferred. Installation pip install -r requirements-standalone.txt Manual installation: pip...
cve-2015-3306
CVE-2015-3306 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2015-3306 Image author: https://github.com/t0kx/exploit-CVE-2015-3306...
cve-2018-7600
CVE-2018-7600 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-7600 Image author: https://github.com/knqyf263/CVE-2018-7600...
CVE-2026-20896
CVE-2026-20896 Lab This repository provides a small, self-contained lab for exploring the CVE-2026-20896 issue in a controlled and authorized environment. Overview The lab includes: poc.py: my customized proof-of-concept script that demonstrates the issue and exports browser-ready cookie files...
cve-2016-8869
CVE-2016-8869 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2016-8869 Image author: https://github.com/Medicean/VulApps/tree/master/j/joomla/1...
CVE-2025-32463-lab
CVE-2025-32463 Vulnerability Lab Environment This project builds an experimental environment based on Docker for reproducing and testing the sudo local privilege escalation vulnerability CVE-2025-32463. The image contains the affected version of sudo, along with exploit scripts and auxiliary tool...
fuxi
Fuxi 2.1 - developing Fuxi is cross-platform compatible and works in any Python 3.x environment including Linux, Mac OSX and Windows. Getting Started Docker docker pull jeffzh3ng/fuxi docker run -itd --name fuxidocker -p 5000:50020 jeffzh3ng/fuxi:latest Wait about 15 seconds for the service to...
poc-2025-9074
CVE-2025-9074 | Docker API CVE-2025-9074 PoC Proof-Of-Concept A sophisticated exploitation framework for CVE-2025-9074, targeting unauthenticated Docker API endpoints with an integrated interactive command shell. Overview This tool automates the exploitation of exposed Docker API instances withou...
day01-sessionreaper-lab
Day 1 — SessionReaper-style Vulnerable Lab Educational This is a tiny lab that simulates the core idea reported for CVE-2025-54236 “SessionReaper”: improper validation of nested JSON leading to dangerous code paths. This is not Magento/Adobe Commerce; it's a minimal educational replica to practic...