nginx-patch

nginx 1.15.x Basis-Image basierend auf debian-base nginx engine x ist ein HTTP- und Reverse-Proxy-Server, ein Mail-Proxy-Server und ein generischer TCP-Proxy-Server. Dieses benutzerdefinierte nginx-Image enthält: ngxdevelkit set-misc-nginx-module headers-more-nginx-module nginx-http-auth-digest...

zuthaka

A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » · Report Bug · Request Feature · Table of Contents 1. About The Project Problem statement Solution Built With 2. Already...

associated-threat-analyzer

एसोसिएटेड-थ्रेट-विश्लेषक नोट : गोपनीयता कानून खतरनाक डोमेन और आईपी साझा करने के बारे में क्या कहते हैं? कृपया देखें; USAGEPOLICY.md LICENSE विवरण एसोसिएटेड-थ्रेट-विश्लेषक स्थानीय खतरनाक डोमेन और IPv4 सूचियों का उपयोग करके आपके वेब एप्लिकेशन से जुड़े खतरनाक IPv4 पतों और डोमेन नामों का पता लगाता है...

DockerENT

...

CVE-2026-44848-PoC

CVE-2026-44848 — Portainer: autorizzazione mancante sugli endpoint dei plugin Docker → RCE sull'host Prova di concetto per CVE-2026-44848 , una vulnerabilità di autenticazione mancante CWE-862 in Portainer che consente a un utente non amministratore con accesso all'endpoint Docker di eseguire...

cve-2019-5736-exp

cve-2019-5736-exp Questo è un proof-of-concept PoC di exploit per la vulnerabilità CVE-2019-5736 in runc, il runtime utilizzato in Docker. Dichiarazione di non responsabilità Ho intrapreso questo progetto come esercizio, per ragioni educative e per divertimento. Dovrebbe essere scontato che non...

xss_vulnerability_challenges

XSS Vulnerability Scenarios challenges This repository is a Dockerized php application containing some XSS vulnerability challenges. The ideas behind challenges are: Javascript validation bypass html entities bypass WAF bypass Black-list validation bypass Basic XSS validation bypass Double encode...

peetch

peetch peetch is a collection of tools aimed at experimenting with different aspects of eBPF to bypass TLS protocol protections. Currently, peetch includes three subcommands. The first called dump aims to sniff network traffic by associating information about the source process with each packet...

divd-2021-00038--log4j-scanner

divd-2021-00038--log4j-scanner Este scanner irá escanear recursivamente caminhos incluindo arquivos compactados para versões vulneráveis do log4j e arquivos org/apache/logging/log4j/core/lookup/JndiLookup.class. Atualmente, a lista de permissão define versões não exploráveis, neste caso log4j-cor...

extrude

extrude Analyse binaries for missing security features, information disclosure and more. 🚧 Extrude is in the early stages of development, and currently only supports ELF and MachO binaries. PE Windows binaries will be supported soon. Usage root@kitploit: Usage: extrude flags file Flags: -a, --all...

sgxray

SGXRay: Automating Vulnerability Detection for SGX Apps Intel SGX protects isolated application logic and sensitive data inside an enclave with hardware-based memory encryption. To use such hardware-based security mechanism requires a strict programming model on memory usage， with complex APIs in...

dwn

🥽 dwn dockerpwn - un gestore di strumenti di attacco docker introduzione dwn è un "docker-compose per hacker". Utilizzando un semplice formato YAML "plan" simile a docker-compose, vengono definiti nomi di immagini, versioni e mapping di volumi/porte per configurare uno strumento per l'uso...

pulsar-docker-images-patch-CVE-2021-44228

Applica la patch alle immagini Pulsar con l'aggiornamento Apache Log4J 2.17.1 Copre CVE-2021-44228, CVE-2021-45046, CVE-2021-45105 CVE-2021-44832 Vedi Vulnerabilità di sicurezza e aggiornamenti di Log4J per maggiori informazioni. vedi il Dockerfile per la soluzione Creazione e push delle immagini...

CVE-2026-55581

mcp-shell is an MCP server for running shell commands securely. Prior to 0.6.0 , the default Docker security.yaml includes /bin/bash in allowed_executables, while security.go validates only the first token and checkBlockedPatternsAndCommands does not reject the shell -c flag. A caller of the shel...

yeti

Yeti Platform Yeti aims to bridge the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline for DFIR teams. It was born out of frustration of having to answer the question "where have I seen this artifact before?" or "how do I search for IOCs related t...

tor-rootkit

tor-rootkit A Python 3 standalone Windows 10 / Linux Rootkit. The networking communication get's established over the tor network. This rootkit is WIP. Disclaimer Use for educational purposes only. How to use 1. Clone the repo and change directory: root@kitploit: git clone...

vulnx

VulnX Vulnx 🕷️ is An Intelligent Bot Auto Shell Injector that detects vulnerabilities in multiple types of Cms...

archerysec

...

cve-2019-9194

CVE-2019-9194 Questa fa parte di Cved: uno strumento per gestire container docker vulnerabili. Cved: https://github.com/git-rep-src/cved Fonte immagine: https://github.com/cved-sources/cve-2019-9194 Autore immagine: https://github.com/cved-sources/cve-2019-9194...

cve-2018-15877

CVE-2018-15877 Questo fa parte di Cved: uno strumento per gestire container docker vulnerabili. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-15877 Image author: https://github.com/cved-sources/cve-2018-15877...