HTTP-2-RapidReset-CVE-2023-44487-Testlab

This repo is the source code of my docker lab, made for my thesis research...

CVE-2025-9074-Poc

Docker API Unauthenticated RCE CVE-2025-9074 A critical CVE-2025-9074 vulnerability in Docker Desktop enables locally running Linux containers to connect to the Docker Engine API through the default subnet 192.168.65.7:2375. The issue persists regardless of Enhanced Container Isolation ECI or TCP...

CVE-2021-40438

CVE-2021-40438 build docker build -t cve-2021-40438:1.0 . run docker run --rm -d -p 4444:80 cve-2021-40438:1.0 check CVE-2021-40438 ./main.sh...

Telnet-TestVuln-CVE-2026-24061

Telnet Docker Test Vulb CVE-2026-24061 docker build -t telnet-vuln . Run docker run -d \ --name telnet-vuln \ -p 127.0.0.1:2323:23 \ telnet-vuln...

CVE-2026-1357-Lab

CVE-2026-1357 — WPvivid Backup & Migration Vuln vs Patched Docker Lab Local-only Docker lab for comparing WPvivid Backup & Migration: Vulnerable: 0.9.123 Patched: 0.9.124 Built for learning practice lab setup, verification, logs, notes. Anything PoC-related is intended to run only inside this lab...

CVE-2026-21876

CVE-2026-21876 Lab Environment for CVE-2026-1357 1. Build the environment sudo apt update && sudo apt install docker.io docker-compose -y sudo systemctl start docker git clone Link of Repo sudo chmod -R 755 . sudo docker-compose up --build -d FireFox: http://localhost:8083 2. Exploit the...

Log4shell

Log4J lab Description This is a lab for playing around with the Log4J CVE-2021-44228 Springboot app + Log4J 2.6.1 Usage docker build . -t mylog && docker run --rm -p 8081:8080 --name mylog-app mylog...

readme2demo

readme2demo — verified tutorials & demo videos from your README ▶ readme2demo generating its own tutorial: an AI agent runs this repo's README in a sandbox, a fresh container replays every step, then the demo is rendered. Full self-run output in examples/readme2demo · run against another project ...

api-scanner-docker

API Scanner - Self-Hosted Deployment API Scanner is an automated API security testing tool that scans REST and SOAP APIs for vulnerabilities using OpenAPI/Swagger specifications and WSDL files. Prerequisites Docker Engine 20.10+ Docker Compose v2 Python 3.6+ for setup script 8 GB RAM minimum 16 G...

cve-2017-12615

CVE-2017-12615 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2017-12615 Image author: https://github.com/Medicean/VulApps/tree/master/t/tomcat/1...

CVE-2017-11610

LAB 3- CVE-2017-11610 I. SYSTEM ANALYSIS Identifying Attack Surface from the Docker Environment Starting with what is running in the environment. I list all active containers: docker ps-a The victim exposes a single port:9001. Port 9001 is not a standard web app. Looking up the port database show...

cve-2018-16509

CVE-2018-16509 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-16509 Image author: https://github.com/knqyf263/CVE-2018-16509...

vuln-scanner

vuln-scanner An automated vulnerability assessment platform that orchestrates 210 open-source security tools , aggregates and deduplicates findings, optionally chains tools into a discovery data-flow graph , runs an optional OpenAI-compatible LLM analysis layer for triage, clustering, and...

CVE-2022-44268-ImageMagick-Vulnerable-Docker-Environment

CVE-2022-44268 ImageMagick Arbitrary Local File Read https://www.metabaseq.com/imagemagick-zero-days/ Based on the PoC CVE-2022-44268 ImageMagick Arbitrary File Read PoC, I created a vulnerability testing environment by using docker. Usage get image docker pull y1nglamore/cve202244268:latest you...

Joomla-CMS-Full-Lifecycle-Pentest

Full-Lifecycle CMS Penetration Testing Joomla 4.2.5 📌 Project Overview This project demonstrates a full-lifecycle penetration test conducted on an open-source CMS Joomla 4.2.5. The entire test follows standard methodologies OWASP/PTES from lab deployment up to exploitation, post-exploitation, and...

CVE-2025-9074

CVE-2025-9074 – Full Docker Escape on Windows & macOS Docker Desktop 📌 Description Docker Desktop exposes the internal Docker Engine API at http://192.168.65.7:2375 to any running container — with no authentication and no access control. Because the engine itself can mount the host filesystem, a...

ensimag-secu3a-cve-2024-22416

CVE-2024-22416 Reference report: GHSA-pgpj-v85q-h5fm This repository contains a docker compose configuration that setups both a pyLoad server and an attacker server that just provides a csrf.html. To test yourself, just run docker composer up you need to have docker composer installed additionall...

CVE-2017-5638-Attack-and-Defense

Apache Struts2 S2-045 Defense & Exploitation Lab A Docker-based security lab demonstrating both exploitation and defense against the Apache Struts2 S2-045 vulnerability CVE-2017-5638. This lab includes: 1. Vulnerable Application : Struts 2.3.31 vulnerable to S2-045 for exploitation demonstration ...

CVE-2019-16097

CVE-2019-16097-batch Disclaimer Only for security research purposes. Do not use for illegal testing. You bear all consequences!!! CVE-2019-16097-batch Batch vulnerability exploitation script Add target addresses in batch to the url.txt file http://1.1.1.1 http://2.2.2.2 Run this script with Pytho...

gtfocli

GTFOcli GTFOcli it's a Command Line Interface for easy binaries search commands that can be used to bypass local security restrictions in misconfigured systems. Table of Contents Table of Contents Installation Usage Search for Unix binaries Search for Windows binaries Search using dockerized...