apache-cve-poc

apache-cve-poc Dockerisierter Proof-of-Concept von CVE-2021-40438 in Apache 2.4.48...

Docker-Escape-Miner

Utilizzare un exploit Docker pubblicato per ottenere accesso root ed eseguire uno script di mining bitcoin Questo utilizza due librerie open source: nightminer di @ricmoo per il mining bitcoin in python RunC-CVE-2019-5736 di @twistlock per l'escape da Docker Requisiti di sistema È stato testato s...

log4j-vulnerability

Vulnerabilità LOG4J Un progetto basato su Java che mostra come sfruttare la vulnerabilità CVE-2021-44228. https://user-images.githubusercontent.com/13152452/147803050-458593e9-4b54-4e1f-ba07-802866b9b43e.mp4 Requisiti Un sistema operativo basato su Linux: io ho usato Ubuntu Desktop 20.10 64 bit...

MassScanning-CVE-2025-55182

Scanner Continuo per VPS Un setup leggero composto da orchestratore e scanner worker, per eseguire scan di grandi dimensioni o continui su file di input suddivisi. Questo repository contiene script di orchestrazione, un'immagine worker basata su Docker e script di supporto per eseguire scan...

day09-bentoml-deser-lab

Dia 09 — CVE-2025-27520 desserialização insegura estilo BentoML — Laboratório Docker Local Este laboratório reproduz a classe de desserialização insegura que levou ao CVE-2025-27520. Ele é intencionalmente vulnerável para fins educacionais. Execute apenas localmente no Docker. Início rápido...

day01-sessionreaper-lab

Giorno 1 — Laboratorio Vulnerabile in stile SessionReaper Didattico Questo è un piccolo laboratorio che simula l'idea centrale segnalata per CVE-2025-54236 “SessionReaper”: validazione impropria di JSON annidato che porta a percorsi di codice pericolosi. Questo non è Magento/Adobe Commerce; è una...

day10-nextjs-middleware-lab

दिन 10 — Next.js middleware auth-bypass lab CVE-2025-29927 सिमुलेशन महत्वपूर्ण: केवल शैक्षिक प्रयोगशाला। Docker में स्थानीय रूप से चलाएं। त्वरित प्रारंभ: root@kitploit: npm i build from repo root with files above docker build -t day10-nextjs-lab . run docker run --rm -d -p 8080:3000 --name day10...

CVE-2026-21005-Docker-Registry-V2-Schema-1-Image-Poisoning

CVE-2026-21005 – Docker Registry V2 Schema 1 Avvelenamento delle Immagini Codice del Programma Python Flask + Shell root@kitploit: dockerregistrysim.py - Simulated registry that serves schema1 manifests from flask import Flask, request, jsonify app = Flaskname images = 'myapp': 'v1': 'layers':...

silicon2022-capturetheflag

silicon2022-ctf Über Eine CTF mit 41 Flags, die auf der RootTheBox-Plattform basiert. Die Infrastruktur wurde größtenteils auf dem Azure Kubernetes Service bereitgestellt. Terminal-Challenges wurden über Docker-Images mit einer modifizierten Version von WeTTY bereitgestellt. Erstellen Die meisten...

CVE-2025-68613-n8n-lab

CVE-2025-68613 مختبر n8n المحلي يوفر هذا المستودع إعدادًا بسيطًا لـ Docker Compose يقوم بتشغيل مثيل n8n ضعيف للاختبار المحلي لـ CVE-2025-68613. المتطلبات Docker Desktop أو Docker Engine Docker Compose v2 بدء سريع 1. تشغيل الحاوية: root@kitploit: docker compose up -d 2. افتح n8n في متصفحك:...

faraday-cli

Faraday on the terminal Use faraday directly from your favorite terminal faraday-cli is the official client that make automating your security workflows, easier. Before installing, we recommend creating and activating a Python virtual environment to avoid affecting your system Python packages. Fo...

Vulnerable-Lab-NextJS-CVE-2025-29927

Next.js Docker Ciao Mondo Una semplice applicazione Ciao Mondo che utilizza Next.js 12.2 e Docker. Prerequisiti Docker Creazione ed esecuzione dell'applicazione 1. Crea l'immagine Docker: root@kitploit: docker build -t nextjs-docker-hello . 2. Esegui il container: root@kitploit: docker run -p...

CVE-2024-4701-POC

CVE-2024-4701 https://nvd.nist.gov/vuln/detail/CVE-2024-4701 root@kitploit: docker-compose up root@kitploit: python3 ex.py...

CVE-2025-9074-Poc

Docker API RCE non autenticata CVE-2025-9074 Una vulnerabilità critica CVE-2025-9074 in Docker Desktop consente ai contenitori Linux in esecuzione locale di connettersi all'API Docker Engine tramite la sottorete predefinita 192.168.65.7:2375. Il problema persiste indipendentemente dalle...

dockerCVE-2024-835

Questo repository non contiene un README...

Joomla-cve-2015-8562

Joomla! RCE CVE 2015-8562 Docker compose-Datei zum Einrichten der Umgebung für CVE 2015-8562-Tests Inhaltsverzeichnis 1. Über das Projekt 2. Erste Schritte Voraussetzungen Installation 3. Verwendung 4. Mitwirken 5. Lizenz Über das Projekt Dieses Projekt enthält eine Docker compose-Datei zum...

kubebox

= Kubebox small^⎈❏^ Antonin Stefanutti https://github.com/astefanutti@astefanutti // Meta :description: Terminal and Web console for Kubernetes // Settings :idprefix: :idseparator: - :experimental: // Aliases ifdef::env-github :note-caption: ℹ️ :icon-check: ✔️ :icon-edit: ✏️ endif::...

driftwood

Driftwood ⚠️ The Driftwood CLI tool is no longer supported. Please use TruffleHog instead! ⚠️ Driftwood is a tool that can enable you to lookup whether a private key is used for things like TLS or as a GitHub SSH key for a user. Driftwood performs lookups with the computed public key, so the...

csaf

The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...

nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...