cyber-decoy

cyber-decoy A containerized network decoy honeypot that advertises SSH , RDP , and SMB , observes every inbound connection with eBPF , and reverse-proxies each session into an isolated decoy container. The design separates two concerns: 1. Observation. An eBPF TC classifier attached to the broker...

ARTIF

ARTIF ARTIF is a new advanced real time threat intelligence framework built that adds another abstraction layer on the top of MISP to identify threats and malicious web traffic on the basis of IP reputation and historical data. It also performs automatic enrichment and threat scoring by collectin...

nuclei-templates-labs

🎯 Nuclei-Templates-Labs A comprehensive collection of vulnerable environments paired with ready-to-use Nuclei templates for practical security testing and learning! 🚀 🎭 Overview Nuclei-Templates-Labs provides security enthusiasts, researchers, and learners with: Controlled environments for hands-...

packj

Packj flags malicious/risky open-source packages Packj pronounced package is a tool to help to mitigate software supply chain attacks. It can detect malicious, vulnerable, abandoned, typo-squatting, and other "risky" packages from popular open-source package registries, such as NPM, RubyGems, and...

mailcow-dockerized

mailcow: dockerized - 🐮 + 🐋 = 💕 Want to support mailcow? Please consider a support contract with Servercow to support further development. We support you while you support us. : You can also get a SAL which is a one-time payment with no liabilities or returning fees. Or just spread the word: moo...

kubesploit

Kubesploit Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent dedicated for containerized environments written in Golang and built on top of Merlin project by Russel Van Tuyl @Ne0nd0g. Our Motivation While researching Docker and Kubernetes, we noticed that...

Docker-Security

Docker Security This is the OWASP Docker Top 10. It's a work in progress. About this document This document describes the most important 10 security bullet points for building a secure containerized environment. You can use it as a specification sheet if you start from scratch, alternatively...

pentest_lab

Pentest Lab Ya no estoy desarrollando activamente esto, pero corregiré errores y revisaré issues y pull requests. Se agradece la ayuda : Este laboratorio de pentest local utiliza docker compose para levantar múltiples servicios víctimas y un servicio atacante que ejecuta Kali Linux. Si ejecutas...

kubesploit

!Licenselicense-imglicense !Downloadsdownload Kubesploit Kubesploit es un servidor y agente de Comando y Control C&C HTTP/2 multiplataforma para post-explotación, diseñado específicamente para entornos contenerizados, escrito en Golang y construido sobre el proyecto Merlin de Russel Van Tuyl...

Log4Shell-PoC

██╗ ██████╗ ██████╗ ██╗ ██╗███████╗██╗ ██╗███████╗██╗ ██╗ ██║ ██╔═══██╗██╔════╝ ██║ ██║██╔════╝██║ ██║██╔════╝██║ ██║ ██║ ██║ ██║██║ ███╗███████║███████╗███████║█████╗ ██║ ██║ ██║ ██║ ██║██║ ██║╚════██║╚════██║██╔══██║██╔══╝ ██║ ██║ ███████╗╚██████╔╝╚██████╔╝ ██║███████║██║...

Dockerized-CVE-2019-14287

Dockerized CVE-2019-14287 Containerized and deployable use of the CVE-2019-14287 vuln. View README.md for more. This CVE affects all versions of sudo under 1.8.28 where a sudo user can escalate to root by referencing its user ID. This Dockerfile allows this CVE to be built, where it can be used f...

dr_robot

. . . . . . . : \ : \ : \ : . \ : / : . \ :| | | || || || : | || | \ | : | | | :| | . | || : \ | : \ | : || | | : | | | |. / | | | |\ . / |/ ./ | | :/ | | || :/ :/ | | : : : Copyright 2019 National Technology & Engineering Solutions of Sandia, LLC NTESS. Bajo los términos del Contrato DE-NA000352...

KLAIOS

🛡️ KLAIOS – System Manual v6.0 Name: KLAIOS Kali Linux AI Operations System Version: 6.0 Red Team Edition Status: Operational / Armed 1. What is KLAIOS? KLAIOS is a hybrid security environment. It combines the offensive power of Kali Linux with the security of a VPN bunker and the intelligence of...

OwnCloud - Phpinfo Configuration

An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment phpinfo. This information...

CVE-2026-84304 affecting package containerized-data-importer for versions less than 1.62.0-8

CVE-2026-84304 affecting package containerized-data-importer for versions less than 1.62.0-8. A patched version of the package is available...

CVE-2026-84445 affecting package containerized-data-importer for versions less than 1.62.0-8

CVE-2026-84445 affecting package containerized-data-importer for versions less than 1.62.0-8. A patched version of the package is available...

SUSE SLES15 Security Update : containerized-data-importer (SUSE-SU-2026:4209-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4209-1 advisory. - CVE-2025-58058: github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory bsc1248946. - CVE-2026-25680: golang.org/x/net/html...

Security update for containerized-data-importer

This update for containerized-data-importer fixes the following issues: CVE-2025-58058: github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory bsc1248946. CVE-2026-25680: golang.org/x/net/html: denial of service when parsing arbitrary HTML bsc1267176. CVE-2026-25681: golang.org/x/net/html:...

SUSE-SU-2026:4209-1 Security update for containerized-data-importer

This update for containerized-data-importer fixes the following issues: - CVE-2025-58058: github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory bsc1248946. - CVE-2026-25680: golang.org/x/net/html: denial of service when parsing arbitrary HTML bsc1267176. - CVE-2026-25681:...

AZL-103137 CVE-2025-11395 affecting package containerized-data-importer 1.62.0-8

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...