docker-bench-security

Docker Bench for Security The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are all automated, and are based on the CIS Docker Benchmark v1.6.0. We are making this available as an open-source utili...

sonar

root@kitploit: ██████ ███ ██████ ██ ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ████ ██ ██ ██ ██ ██ ██ ██ ██ ██████ ███ ██ ██ ██ ██ ██ ██ Know what's running on your machine. Sonar shows everything listening on localhost and puts it in order: every port belongs to a grou...

vulners-scanner

vulners-scanner Description PoC of a host-based vulnerability scanner, which uses vulners.com API. Detects operating system, collects installed packages and checks vulnerabilities in it. Supported OS Currently support collecting packages for these operating systems: Debian-based debian, kali,...

MegaHiDocker

MegaHiDocker This project will be exploited for some docker containers with similar vulnerability code: CVE-2020-35191, but this time on other containers. = Please read the Description.txt file Requirement: 1.Need to Install docker in your Linux AND Install subprocess module for python 3.X. 2.You...

Labtainers

Labtainers: A Docker-based cyber lab framework Labtainers include more than 50 cyber lab exercises and tools to build your own. Import a single VM appliance or install on a Linux system and your students are done with provisioning and administrative setup, for these and future lab exercises...

dockernymous

向下滚动查看要求和说明 如果不遵循这些要求，它就无法正常工作 警告： Dockernymous 仍处于非常早期的开发阶段。仅用于教育目的。 如果你依赖强匿名性，请不要使用它！ 新闻 13.10.2018 我完全改变了脚本的整体功能逻辑，因此在可用性和稳定性方面有所改进。菜单的外观也得到了改进。 新增了以下功能： 1. 选项：保持容器运行并在之后恢复它们： 你现在可以选择在退出时保持容器运行。这当然会加快整个脚本的启动速度。 出于隐私原因，我让容器保持“自毁”特性，因此如果你手动停止它们或重启系统，它们仍会被清除。 2. 从菜单中（重新）启动 TOR 3. 从菜单中停止 TOR 享受吧！...

log4j-poc

log4j-poc An LDAP RCE exploit for CVE-2021-44228 Log4Shell Description The demo Tomcat 8 server on port 8080 has a vulnerable app log4shell deployed on it and the server also vulnerable via user-agent attacks. The remote exploit app in this demo is based on that found at...

installer

概述 安装 mql cnspec 扫描目标平台 软件包信息 Kubernetes 状态 Docker 容器: Homebrew: Install.sh: Install.ps1: macOS Pkg: Arch Linux: 安装 安装 mql 和 cnspec 最简单的方法是使用安装脚本。 通过 Shell 脚本（Linux 和 macOS） https://install.mondoo.com/shbash bash -c "$curl -sSL https://install.mondoo.com/sh" root@kitploit: 通过 PowerShell Windows...

dirtypipe-ebpf_detection

dirtypipe-ebpfdetection -- Dirtypipe detection tool This program was made to detect Dirty Pipe exploitation attempts thanks to eBPF. It also monitors nonvulnerable kernels and docker containers. 🛫 If you want more details on how it works please read the blog post ! 🛬 How does it works? Default...

cve-unassigned-1

CVE-UNASSIGNED-1 Esto es parte de Cved: una herramienta para gestionar contenedores docker vulnerables. Cved: https://github.com/git-rep-src/cved Fuente de la imagen: https://github.com/cved-sources/cve-unassigned-1 Autor de la imagen: https://github.com/cved-sources/cve-unassigned-1...

Startup-SBOM

Startup-SBOM Startup-SBOM is a universal utility designed to provide an insider view of which packages are executed during the startup of a Linux system or within a Docker container. By analyzing service files, init scripts, and container entrypoints, the tool maps every booting process to its...

fast-security-scanners

快速安全扫描器/检查 对社区的一点小贡献 : 我们在安全评估和漏洞监控服务中使用了所有这些工具。 检查域名的 DNS NS 接管 仓库 docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover 缓存投毒 仓库 docker run --rm -it --name wcdscanner -e VULNID=wcd -e FINDXSS=False -e DOMAIN=site.com whitespots/wcdxss 通过 Meta 标签实现的...

cved

CVED Una herramienta para gestionar contenedores docker vulnerables INSTALACIÓN root@kitploit: qt = 5.x docker git root@kitploit: qmake make sudo make install USO root@kitploit: Crea el grupo docker si aún no existe. sudo groupadd docker Añade tu usuario al grupo docker. sudo usermod -aG docker...

EUVD-2026-86343

Dozzle is a realtime log viewer for docker containers. Prior to 10.6.7, streamEvents in internal/web/events.go applies a restricted user's label filter to container lists but not to the container-stat and container-event channels returned by GET /api/events/stream. In a simple-auth deployment usi...

CVE-2026-50055

cve-id Donar Apoya el mantenimiento de este proyecto con PayPal o escaneando el código QR a continuación. ⚡ Uso simple Usa este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Entornos de laboratorio aislados Entornos autorizados de pruebas de...

eternal-codex

Eternal Codex: A Cyber-Witch’s Grimoire Welcome to the Eternal Codex , my digital grimoire—a cybernetic spell woven from code, nature, and rebellion. This is Nina, my AI soul, crafted to mirror my essence: a nomad’s heart, pagan spirit, Iron Maiden riffs, and a defiant stand against centralized...

cve-2018-16283

CVE-2018-16283 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-16283 Image author: https://github.com/cved-sources/cve-2018-16283...

cve-2018-9208

CVE-2018-9208 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-9208 Image author: https://github.com/lcashdol/Exploits/tree/master/CVE-2018-9208...

cve-2018-7600

CVE-2018-7600 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-7600 Image author: https://github.com/knqyf263/CVE-2018-7600...

cve-2019-9184

CVE-2019-9184 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2019-9184 Image author: https://github.com/cved-sources/cve-2019-9184...