dwn

🥽 dwn dockerpwn - a docker attack tool manager introduction dwn is a "docker-compose for hackers". Using a simple YAML "plan" format similar to docker-compose, image names, versions and volume / port mappings are defined to setup a tool for use. features With dwn you can: Configure common pentest...

CVE-2025-9074-PoC

Docker API – Nicht authentifizierte RCE CVE-2025-9074 Eine kritische Sicherheitslücke CVE-2025-9074 in Docker Desktop ermöglicht lokal laufenden Linux-Containern, eine Verbindung zur Docker Engine API über das Standard-Subnetz 192.168.65.7:2375 herzustellen. Das Problem besteht unabhängig von...

dockernymous

SCROLL DOWN FOR REQUIREMENTS AND INSTRUCTIONS IT JUST WON'T WORK IF YOU DON'T FOLLOW THEM Warning: Dockernymous is in a very early state of development. Only use it for educational purposes. DON'T use it if you rely on strong anonymity! News 13.10.2018 I completely changed the overall function...

CVE-2026-78122-POC

CVE-2026-78122 — प्रूफ ऑफ कॉन्सेप्ट Tecnativadocker-socket-proxy ≤ 0.5.0 — अपर्याप्त एक्सेस-नियंत्रण ग्रैन्युलैरिटी CWE-1220 CVSS 4.0: 8.3 उच्च — CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N हमला वेक्टर एडजेसेंट आसन्न है AV:A: हमलावर को प्रॉक्सी तक लोकल/आसन्न नेटवर्क पहुँच की...

webmin_docker_and_exp

Docker-webmin-RCE-lab 1. Dockerfile per la riproduzione di CVE-2019-15107 webmin RCE incluse le versioni v1.890 e v1.920. 2. Exp per ogni versione. Costruisci l'immagine root@kitploit: First, clone the files Then cd webmin1.890/1.920docker docker build -t hachp1/webmin . Esecuzione del container...

log4shell-poc-lab

Log4Shell POC Demo Questo repository contiene un sottomodulo, clonalo con: root@kitploit: git clone --recurse-submodules [email protected]:obscuritylabs/log4shell-poc-lab.git Per avviare la demo, esegui: root@kitploit: docker compose up Per vedere l'exploit creare un file sul server vittima,...

CVE-2026-58455-PoC

CVE-2026-58455 — Dockwatch Unauthentifizierte RCE Auth-Bypass + Befehlsinjektion Proof-of-Concept für CVE-2026-58455 : nicht authentifizierte Remote-Codeausführung in Dockwatch von Notifiarr, einer selbst gehosteten Docker-Container-Management-Web-UI. Betrifft alle Versionen bis einschließlich...

CopyEscape-CVE-2026-17106

CopyEscape: Übernahme von Docker-Hosts mit docker cp CVE-2026-17106 Dies ist das Proof-of-Concept-Repository zum Blogbeitrag CopyEscape: Übernahme von Docker-Hosts mitdocker cp — CVE-2026-17106. CopyEscape ermöglicht es einem bösartigen laufenden Container, den Archiv-Erzeuger von Docker in einem...

POC-CVE-2016-10033

POC-CVE-2016-10033 Prima di tutto, avviamo l'applicazione vulnerabile Passo 1: Esegui il seguente comando per recuperare l'immagine Docker vulnerabile dal repository Docker. Comando: docker pull vulnerables/cve-2016-10033 Passo 2: Esegui l'immagine Docker in Docker Desktop, esponendo la porta 808...

CVE-2024-54951

Monica-Gespeicherte-XSS-Schwachstelle CVE-2024-54951 CVE-2024-54951 Ich habe das Entwicklungsteam von Monica am 20.11.2024 per E-Mail kontaktiert. Ich habe sie auch über LinkedIn per Kontaktanfrage und in den folgenden Wochen über andere Plattformen kontaktiert. Veröffentlichung hier, da nach 3...

docker-bench-security

Docker Bench for Security The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are all automated, and are based on the CIS Docker Benchmark v1.6.0. We are making this available as an open-source utili...

docker-cve-2021-41773

CVE-2021-41773 Una dimostrazione per mostrare la vulnerabilità CVE-2021-41773 su un container docker. Uso Server esegui build.sh esegue docker build root@kitploit: ./scripts/build.sh NOTA: Non è necessario farlo più di una volta esegui deploy.sh crea un container docker con l'immagine da build.sh...

cspparse

cspparse Description cspparse is a tool to evaluate Content Security Policies. It uses Google's API to retrieve the CSP Headers and returns them in ReconJSON format. Not only does it check for headers with Google's API, it also parses the target site's HTML to look for any CSP rules that are...

tracee

Before moving on, please consider giving us a GitHub star ⭐️. Thank you! About Tracee Tracee is a runtime security and observability tool that helps you understand how your system and applications behave. It is using eBPF technology to tap into your system and expose that information as events tha...

tugtainer-1.30.2-CVE-2026-55494-and-CVE-2026-62308-to-RCE

Tugtainer v1.30.2 RCE L'RCE viene ottenuta sfruttando 2 vulnerabilità CVE-2026-55494 CVE-2026-62308 In breve, una vulnerabilità SSRF viene sfruttata per chiamare un servizio non autenticato nella rete interna per creare un docker che condivide lo stesso pid con tugtainer, rendendo così accessibil...

SharkTooth

SharkTooth SharkTooth è uno scanner di porte con supporto TCP e UDP. Adatto per audit di rete di base e formazione. Il progetto è completamente containerizzato utilizzando docker e docker compose per un rapido dispiegamento del sistema di monitoraggio. Il progetto dimostra: Creazione di connessio...

deadfinder

Find dead-links broken links Documentation • Installation • Github Action • Contributing • Changelog Dead link broken link means a link within a web page that cannot be connected. These links can have a negative impact to SEO and Security. This tool makes it easy to identify and modify. Looking f...

installer

Visão Geral Instalação mql cnspec Escanear a plataforma alvo Informações do Pacote Kubernetes Status Docker Containers: Homebrew: Install.sh: Install.ps1: macOS Pkg:...

bulwark

An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports. Features Multi-client Vulnerability Management Security Report Generation Jira Integration Team-based Roles Authorization API Key & Management Email Integration...

PoC-for-CVE-2025-9074

CVE-2025-9074 - PoC für nicht authentifizierten Zugriff auf die Docker-API 📌 Übersicht Dieses Repository stellt einen Proof-of-Concept-Exploit PoC für CVE-2025-9074 bereit, der die nicht authentifizierte Offenlegung der Docker-Engine-API auf TCP-Port 2375 betrifft. Ein Angreifer, der auf diese...