web-hacking-playground

Web Hacking Playground Description Web Hacking Playground is a controlled web hacking environment. It consists of vulnerabilities found in real cases, both in pentests and in Bug Bounty programs. The objective is that users can practice with them, and learn to detect and exploit them. Other topic...

nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...

conpot

Conpot About Conpot is an ICS honeypot with the goal to collect intelligence about the motives and methods of adversaries targeting industrial control systems. Documentation The documentation can be found here. If you are just checking out conpot, we suggest that you go for quick install. If you...

wirehole

What is this? WireHole is a docker-compose project that combines WireGuard, PiHole, and Unbound to create a full or split-tunnel VPN that is easy to deploy and manage. This setup allows for a VPN with ad-blocking via PiHole and enhanced DNS privacy and caching through Unbound. Author 👤 Devin Stok...

cve-2021-44228-log4j-test

cve-2021-44228-log4j-test テスト 1. LDAPサーバーとハッキングファイルダウンロードサーバー 1.1 Docker-composeの実行 docker-compose.yml version: '2' services: dockerdj: image: openidentityplatform/opendj:latest containername: ldap environment: ROOTUSERDN: "cn=han" ROOTPASSWORD: "han" BASEDN: "dc=bumbing,dc=xyz" ports: -...

Reconator

Reconator is an automated reconnaissance framework. Add a target — alone or in bulk — and the worker runs 17 recon modules against it subdomain enum, dirbrute, JS/link mining, WAF fingerprint, takeover check, GF triage, and more. The dashboard shows per-module output as it lands. Stack Layer| Tec...

faraday

オープンソース脆弱性管理ツール セキュリティには2つの難しい課題があります。新しい情報を入手するためのスマートな方法を設計することと、修復作業を改善するために発見事項を追跡することです。Faradayを使えば、脆弱性の発見に集中でき、残りの作業は私たちがお手伝いします。ターミナルで使用するだけで、作業をその場で整理できます。 Faradayは、コミュニティで利用可能なツールを真のマルチユーザー方式で活用できるように作られました。 Faradayは読み込んだデータを集約・正規化し、マネージャーとアナリストの両方に役立つさまざまなビジュアライゼーションで探索できるようにします。...

csaf

The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...

Compose Aperisite

AperiSite Requirements Docker; Docker Compose; Less time to prepare environment, more time to compose. Download git clone https://gitlab.com/AperiKube/compose-aperisite aperisite pushd aperisite/ git submodule update --init --recursive git submodule foreach --recursive git checkout master Prepare...

writehat

WriteHat is a reporting tool which removes Microsoft Word and many hours of suffering from the reporting process. Markdown -- HTML -- PDF. Created by penetration testers, for penetration testers - but can be used to generate any kind of report. Written in Django Python 3. Features: Effortlessly...

holos

KVM 用の Docker compose。1 つの YAML ファイルでマルチ VM スタックを定義。libvirt も XML も分散コントロールプレーンも不要。 ウェブサイトとドキュメント: https://zeroecco.github.io/holos/ プリミティブはコンテナではなく VM。すべてのワークロードインスタンスは独自の カーネル境界、qcow2 オーバーレイ、cloud-init シード、生成された SSH アクセスを 持ちます。 クイックスタート Linux + /dev/kvm が必要です。macOS ビルドでは validate、import、images、...

AutoSploit

Docker deployment instructions tl;dr Using docker-compose: git clone https://github.com/NullArray/AutoSploit.git cd Autosploit/Docker docker-compose run --rm autosploit Using just Docker: git clone https://github.com/NullArray/AutoSploit.git cd Autosploit/Docker If you wish to edit default postgr...

ensimag-secu3a-cve-2024-22416

CVE-2024-22416 参考レポート: GHSA-pgpj-v85q-h5fm このリポジトリには、pyLoadサーバーと、csrf.htmlを提供するだけの攻撃者サーバーの両方をセットアップするdocker compose設定が含まれています。自分でテストするには、docker composer upを実行してください（dockerに加えてdocker composeがインストールされている必要があります）。 次に、localhost:8000（pyLoadのログインページ）にアクセスし、ユーザー pyload、パスワード pyload...

DSP

DockerSecurityPlayground Docker Security Playground는 다음을 할 수 있는 애플리케이션입니다: 네트워크 프로토콜, 규칙 및 보안 문제를 이해하기 위해 네트워크 및 네트워크 보안 시나리오 를 PC에 DSP를 설치하여 생성할 수 있습니다. 취약점 실습 시나리오를 시뮬레이션하여 침투 테스트 기술을 학습 할 수 있습니다. docker-compose 프로젝트 집합을 관리 할 수 있습니다. DSP의 주요 목표는 침투 테스트 및 네트워크 보안을 학습하는 것이지만, 유연성 덕분에 모든...

tarnish

tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...

iris-web

침해 대응 조사 시스템 현재 버전 v2.4.20 온라인 데모 IRIS Iris는 침해 대응 담당자가 조사 중 기술적 세부 정보를 공유할 수 있도록 지원하는 웹 기반 협업 플랫폼입니다. 목차 시작하기 IrisWeb 실행하기 설정 버전 관리 시연 문서 업그레이드 API 도움말 고려 사항 라이선스 시작하기 Iris는 두 가지 주요 부분, IrisWeb과 IrisModules로 나뉩니다. IrisWeb은 Iris의 핵심웹 인터페이스, 데이터베이스 관리 등을 포함하는 웹 애플리케이션입니다. IrisModules는 핵심의 확장 기능으로,...

challenge-cve-2024-3552

challenge-cve-2024-3552 运行命令以启动挑战：docker-compose up 然后访问：http://localhost:8080 启用插件 Web 目录免费 :D 然后开始漏洞利用...

CVE-2026-20896

CVE-2026-20896 ラボ このリポジトリは、CVE-2026-20896 の問題を、管理された許可された環境で調査するための自己完結型の小型ラボを提供します。 概要 このラボには以下が含まれます: poc.py: この問題を実証し、ブラウザでそのまま使える Cookie ファイルを書き出す、カスタマイズした概念実証スクリプト detect.py: 元プロジェクト https://github.com/rz1027/CVE-2026-20896 に基づくチェッカー docker-compose.yml: 同じ元のリファレンスに基づくローカル Gitea ラボ構成 目的...

FACT

Forensic Artefact Collection Tool Overview FACT is a tool to collect, process and visualise forensic data from clusters of machines running in the cloud or on-premise. Deployment For a basic single-node deployment, we recommend using Docker and Docker Compose. First, read docker-compose.yaml for...

lk_scraper

LinkedIn Scraper Scrapes Any LinkedIn Data Installation $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a Selenium server $ docker run -d -...