honeyprompt

honeyprompt Introducing honeyprompt, an LLM-first deception framework made by/for web developers. The personal passion project of @alectrocute. Supports all major cloud and local LLM providers. SSH, HTTP, TLS, TCP, telnet and more. It ships as a small container and a single static binary and keep...

KubeArmor

KubeArmor 是一个云原生运行时安全强制系统，在系统层面限制 pod、容器和节点（虚拟机）的行为（如进程执行、文件访问和网络操作）。 KubeArmor 利用 Linux 安全模块（LSM）（如 AppArmor、SELinux 或 BPF-LSM）来强制实施用户指定的策略。KubeArmor 通过利用 eBPF 生成带有容器/pod/命名空间身份的丰富告警/遥测事件。 | ---|--- 💪 加固基础设施 ⛓️ 保护关键路...

cve-2014-0050

cve-2014-0050 CVE-2014-0050 Vulnerable site sample This project aims to demonstrate the CVE-2014-0050 exploitation for educational purpose. For more informations, see : https://www.trustwave.com/Resources/SpiderLabs-Blog/CVE-2014-0050--Exploit-with-Boundaries,-Loops-without-Boundaries/...

cve-2019-5736-poc

To run: 1. edit poc command in stage2.c 2. build docker docker build -t cve . 3. run docker docker run -d cve /bin/bash -c "tail -f /dev/null" 4. backup docker-runc cp /usr/bin/docker-runc /usr/bin/docker-runc.bak 5. docker exec -it docker-id /bin/bash 6. in docker run cd /root && ./run.sh && exi...

nginx-cve-fix

Nginx CVE Fix - Source-Built Drop-in for nginx:1.25-bookworm A source-built nginx 1.25.5 container image that remediates two CVEs present in the official nginx:1.25-bookworm image while preserving upstream runtime behavior. CVE| Component| Severity| Technique| Verification model ---|---|---|---|-...

gvisor

¿Qué es gVisor? gVisor proporciona una sólida capa de aislamiento entre las aplicaciones en ejecución y el sistema operativo anfitrión. Es un kernel de aplicación que implementa una interfaz similar a Linuxlinux. A diferencia de Linux, está escrito en un lenguaje seguro para la memoria Go y se...

veinmind-tools

veinmind-tools Documentation veinmind-tools is self-developed by chaitin technology ， cloudwalker team incubation，a container security toolset based on veinmind-sdk 🔥 Demo Veinmind has been connected to openai. You can use openai to conduct a user-friendly analysis of the scan results, allowing y...

dockle

Dockle - Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start Dockle helps you: 1. Build Best Practice Docker images 2. Build secure Docker images Checkpoints includes CIS Benchmarks $ brew untap goodwithtech/dockle who use 0.1.16 or older version $ bre...

dockle

Dockle - 用于安全的容器镜像检查工具，帮助构建最佳实践的Docker镜像，易于上手 Dockle 帮助你： 1. 构建最佳实践的Docker镜像 2. 构建安全的Docker镜像 检查点包括CIS基准bash $ brew untap goodwithtech/dockle who use 0.1.16 or older version $ brew install goodwithtech/r/dockle $ dockle YOURIMAGENAME 参见 安装 和 常见示例 检查点对比 目录 - 特性 - 对比 - 安装 - Homebrew Mac OS X / Linu...

clair

Clair 注意 : 在开发过程中，main 分支可能处于 不稳定甚至损坏状态 。 请使用 releases 页面而非 main 分支来获取稳定二进制文件。 Clair 是一个开源项目，用于对应用容器（当前包括 OCI 和 docker 格式）中的漏洞进行 静态分析。 客户使用 Clair API 对容器镜像进行索引，然后将其与已知漏洞进行匹配。 我们的目标是实现对基于容器的基础设施安全性的更透明观察。因此，该项目取名为 Clair，源自法语词汇，意为 清晰、明亮、透明 。 文档 包含了关于 Clair 架构和操作的全部说明。 社区 邮件列表: [email protected]...

vulhub

Vulhub is an open-source collection of pre-built, ready-to-use vulnerable Docker environments. With just one command you can launch a vulnerable environment for security research, learning, or demonstration, no prior Docker experience required. 中文版本Chinese version Quick Start Install Docker examp...

threagile

Threagile Agile Threat Modeling Toolkit Threagile see threagile.io for more details is an open-source toolkit for agile threat modeling: It allows to model an architecture with its assets in an agile fashion as a YAML file directly inside the IDE. Upon execution of the Threagile toolkit all...

CVE-2021-40438

CVE-2021-40438 build docker build -t cve-2021-40438:1.0 . run docker run --rm -d -p 4444:80 cve-2021-40438:1.0 check CVE-2021-40438 ./main.sh...

cve-2017-5638

cve-2017-5638 cve-2017-5638 Vulnerable site sample This project aims to demonstrate the CVE-2017-5638 exploitation for educational purpose. For more informations, see https://cwiki.apache.org/confluence/display/WW/S2-045 Legal Disclaimer This project is made for educational and ethical testing...

CVE-2026-103667

The Gitea container registry is vulnerable to stored XSS because it serves blob downloads using a Content-Type derived directly from the media type in pushed image manifests. The absence of a Content-Disposition header or a restrictive content security policy allows an attacker with push permissi...

nikto

nikto Nikto web server scanner - https://cirt.net/Nikto2 完整文档 - https://github.com/sullo/nikto/wiki 正常运行： git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h http://www.example.com Run using perl if you forget to chm...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.41 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

melange

melange Compila paquetes apk con pipelines declarativos. Se usa habitualmente para proporcionar paquetes personalizados para imágenes de contenedor creadas con apko. La mayoría de los apks se crean para usarse con los ecosistemas de Wolfi o Alpine Linux. Características principales: Compilaciones...

CVE-2024-21626-runcPOC

Vulnerability Reproduction CVE-2024-21626 docker runc Escape Vulnerability 1. Vulnerability Overview Vulnerability Name| docker runc Escape Vulnerability ---|--- CVE ID| CVE-2024-21626 Disclosure Date| 2024-01-31 Characteristic| / Affected Versions| runc @ v1.0.0-rc93, 1.1.11 2. Exploitation &...

base-drupal

BASE-DRUPAL Esto es parte de Cved: una herramienta para gestionar contenedores docker vulnerables. Cved: https://github.com/git-rep-src/cved Fuente de la imagen: https://github.com/cved-sources/base-drupal Imagen basada en: https://github.com/Medicean/VulApps/tree/master/base/drupal/8.3.0...