193 matches found
docker-bench-security
Docker Bench for Security The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are all automated, and are based on the CIS Docker Benchmark v1.6.0. We are making this available as an open-source utili...
sonar
root@kitploit: ██████ ███ ██████ ██ ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ████ ██ ██ ██ ██ ██ ██ ██ ██ ██████ ███ ██ ██ ██ ██ ██ ██ Know what's running on your machine. Sonar shows everything listening on localhost and puts it in order: every port belongs to a grou...
vulners-scanner
vulners-scanner Description PoC of a host-based vulnerability scanner, which uses vulners.com API. Detects operating system, collects installed packages and checks vulnerabilities in it. Supported OS Currently support collecting packages for these operating systems: Debian-based debian, kali,...
MegaHiDocker
MegaHiDocker This project will be exploited for some docker containers with similar vulnerability code: CVE-2020-35191, but this time on other containers. = Please read the Description.txt file Requirement: 1.Need to Install docker in your Linux AND Install subprocess module for python 3.X. 2.You...
Labtainers
Labtainers: A Docker-based cyber lab framework Labtainers include more than 50 cyber lab exercises and tools to build your own. Import a single VM appliance or install on a Linux system and your students are done with provisioning and administrative setup, for these and future lab exercises...
dockernymous
向下滚动查看要求和说明 如果不遵循这些要求,它就无法正常工作 警告: Dockernymous 仍处于非常早期的开发阶段。仅用于教育目的。 如果你依赖强匿名性,请不要使用它! 新闻 13.10.2018 我完全改变了脚本的整体功能逻辑,因此在可用性和稳定性方面有所改进。菜单的外观也得到了改进。 新增了以下功能: 1. 选项:保持容器运行并在之后恢复它们: 你现在可以选择在退出时保持容器运行。这当然会加快整个脚本的启动速度。 出于隐私原因,我让容器保持“自毁”特性,因此如果你手动停止它们或重启系统,它们仍会被清除。 2. 从菜单中(重新)启动 TOR 3. 从菜单中停止 TOR 享受吧!...
log4j-poc
log4j-poc An LDAP RCE exploit for CVE-2021-44228 Log4Shell Description The demo Tomcat 8 server on port 8080 has a vulnerable app log4shell deployed on it and the server also vulnerable via user-agent attacks. The remote exploit app in this demo is based on that found at...
installer
概述 安装 mql cnspec 扫描目标平台 软件包信息 Kubernetes 状态 Docker 容器: Homebrew: Install.sh: Install.ps1: macOS Pkg: Arch Linux: 安装 安装 mql 和 cnspec 最简单的方法是使用安装脚本。 通过 Shell 脚本(Linux 和 macOS) https://install.mondoo.com/shbash bash -c "$curl -sSL https://install.mondoo.com/sh" root@kitploit: 通过 PowerShell Windows...
dirtypipe-ebpf_detection
dirtypipe-ebpfdetection -- Dirtypipe detection tool This program was made to detect Dirty Pipe exploitation attempts thanks to eBPF. It also monitors nonvulnerable kernels and docker containers. 🛫 If you want more details on how it works please read the blog post ! 🛬 How does it works? Default...
cve-unassigned-1
CVE-UNASSIGNED-1 Esto es parte de Cved: una herramienta para gestionar contenedores docker vulnerables. Cved: https://github.com/git-rep-src/cved Fuente de la imagen: https://github.com/cved-sources/cve-unassigned-1 Autor de la imagen: https://github.com/cved-sources/cve-unassigned-1...
Startup-SBOM
Startup-SBOM Startup-SBOM is a universal utility designed to provide an insider view of which packages are executed during the startup of a Linux system or within a Docker container. By analyzing service files, init scripts, and container entrypoints, the tool maps every booting process to its...
fast-security-scanners
快速安全扫描器/检查 对社区的一点小贡献 : 我们在安全评估和漏洞监控服务中使用了所有这些工具。 检查域名的 DNS NS 接管 仓库 docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover 缓存投毒 仓库 docker run --rm -it --name wcdscanner -e VULNID=wcd -e FINDXSS=False -e DOMAIN=site.com whitespots/wcdxss 通过 Meta 标签实现的...
cved
CVED Una herramienta para gestionar contenedores docker vulnerables INSTALACIÓN root@kitploit: qt = 5.x docker git root@kitploit: qmake make sudo make install USO root@kitploit: Crea el grupo docker si aún no existe. sudo groupadd docker Añade tu usuario al grupo docker. sudo usermod -aG docker...
EUVD-2026-86343
Dozzle is a realtime log viewer for docker containers. Prior to 10.6.7, streamEvents in internal/web/events.go applies a restricted user's label filter to container lists but not to the container-stat and container-event channels returned by GET /api/events/stream. In a simple-auth deployment usi...
CVE-2026-50055
cve-id Donar Apoya el mantenimiento de este proyecto con PayPal o escaneando el código QR a continuación. ⚡ Uso simple Usa este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Entornos de laboratorio aislados Entornos autorizados de pruebas de...
eternal-codex
Eternal Codex: A Cyber-Witch’s Grimoire Welcome to the Eternal Codex , my digital grimoire—a cybernetic spell woven from code, nature, and rebellion. This is Nina, my AI soul, crafted to mirror my essence: a nomad’s heart, pagan spirit, Iron Maiden riffs, and a defiant stand against centralized...
cve-2018-16283
CVE-2018-16283 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-16283 Image author: https://github.com/cved-sources/cve-2018-16283...
cve-2018-9208
CVE-2018-9208 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-9208 Image author: https://github.com/lcashdol/Exploits/tree/master/CVE-2018-9208...
cve-2018-7600
CVE-2018-7600 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-7600 Image author: https://github.com/knqyf263/CVE-2018-7600...
cve-2019-9184
CVE-2019-9184 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2019-9184 Image author: https://github.com/cved-sources/cve-2019-9184...