Plone Docker - Host Header Injection

Plone Docker Official Image 5.2.13 5221 is vulnerable to Host Header Injection due to improper validation of input by the HOST headers. This can lead to Cross-Site Scripting XSS attacks when the malicious Host header value is reflected in the response. id: CVE-2024-23055 info: name: Plone Docker ...

ruflo MCP Bridge - Unauthenticated RCE via terminal_execute

ruflo MCP bridge 3.16.3 in its default docker-compose deployment exposes POST /mcp with no authentication and binds to all interfaces 0.0.0.0:3001. The executeTool function has no server-side deny list for dangerous tools, allowing an unauthenticated attacker to invoke tools/call with...

sx

sx is the command-line network scanner designed to follow the UNIX philosophy. The goal of this project is to create the fastest network scanner with clean and simple code. 📖 Table of Contents Features Install Build from source Quick Start References Contributing Credits License ✨ Features ⚡ 30x...

reconmap

Reconmap Pentesting Management, Automation and Reporting Platform Reconmap is an open source vulnerability assessment and penetration testing platform designed to support security professionals throughout the entire engagement lifecycle. It enables penetration testers and InfoSec teams to...

graphicator

Graphicator Graphicator is a GraphQL "scraper" / extractor. The tool iterates over the introspection document returned by the targeted GraphQL endpoint, and then re-structures the schema in an internal form so it can re-create the supported queries. When such queries are created is using them to...

reproxy

Reproxy 是一个简单的边缘 HTTPs 服务器/反向代理，支持多种提供者（docker、static、file、consul catalog）。一个或多个提供者提供关于请求服务器、请求 URL、目标 URL 和健康检查 URL 的信息。它以单个二进制文件或 Docker 容器的形式分发。 通过 Let's Encrypt 自动 SSL 终止 支持用户提供的 SSL 证书 简单但灵活的代理规则 静态、命令行代理规则提供者 动态、基于文件的代理规则提供者 Docker 提供者，自动发现 Consul Catalog 提供者，通过服务标签发现 支持多个（虚拟）主机 可选流量压缩 可选基于...

reproxy

Reproxy is a simple edge HTTPs server / reverse proxy supporting various providers docker, static, file, consul catalog. One or more providers supply information about the requested server, requested URL, destination URL, and health check URL. It is distributed as a single binary or as a docker...

Reconator

Reconator es un framework automatizado de reconocimiento. Añade un objetivo — solo o en lote — y el trabajador ejecuta 17 módulos de reconocimiento contra él enumeración de subdominios, dirbrute, minería de JS/enlaces, huella de WAF, verificación de takeover, triaje GF, y más. El panel muestra la...

hacktricks-cloud

HackTricks Cloud Hacktricks logos & motion designed by @ppieranacho .1 Run HackTricks Cloud Locally The workflow below follows Git's documented clone, checkout, and pull operations and the repository's published language branches and container setup.238910 Download latest version of hacktricks...

CVE-2022-46463

CVE-2022-46463 CVE-2022-46463POC Harbor 未授权 漏洞详情可见Stack社区 Use python3 cvve-2022-46463.py -u https://127.0.0.1:5003 Options -u URL, --url URL Target URL e.g. http://example.com -h, --help Show help message and exit 直接贴出了docker pull xxx命令...

Nightingale

Nightingale：渗透测试者的 Docker 工具包 该项目由以下机构支持： | ---|--- Nightingale 是一个即用型、多架构的 Docker 工具包，专为渗透测试和安全研究而设计。 它为你提供了一个可复现的环境，包含针对 Web、网络、移动端、API、OSINT 和取证工作流的精选工具。 快速入门（2 分钟） docker pull ghcr.io/rajanagori/nightingale:stable docker run -it --name Nightingale -p 8080:7681 ...

spring4shell_victim

spring4shellvictim Aplicación Spring intencionalmente vulnerable para probar CVE-2022-22965 Para más información: https://www.fracturelabs.com/posts/effective-spring4shell-scanning-exploitation/ Uso Construcción El siguiente código creará rápidamente una imagen Docker vulnerable usando los...

cyclonedx-cli

/ / / / / \ |/ / / / / / / / / / / / / / / / / / / / / / / / / / / / / // // / // / // / / / / / // / | / // // / /, ///// /////|| /// // Usage: cyclonedx command options Options: --version Show version information -?, -h, --help Show help and usage information Commands: add Add...

evtx

EVTX A cross-platform parser for the Windows XML EventLog format Features 🔒 Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. ⚡ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! 🚀 Multi-threaded. ✨ Suppor...

CVE-Factory

CVE-Factory: Escalando Tareas Agénticas de Nivel Experto para Vulnerabilidades de Seguridad en Código CVE-Factory es un sistema Multi-Agente para la reproducción de CVEs totalmente automatizada y de extremo a extremo. Dados los registros CVE, el sistema investiga automáticamente los detalles,...

fuzzilli

Fuzzilli A coverage-guided fuzzer for dynamic language interpreters based on a custom intermediate language "FuzzIL" which can be mutated and translated to JavaScript. Usage The basic steps to use this fuzzer are: 1. Download the source code for one of the supported JavaScript engines. See the...

recollapse

REcollapse REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications. It can also be helpful to bypass WAFs and weak vulnerability mitigations. For more information, take a look at the REcollapse blog post. The goal of this tool ...

dvwassl

启用SSL的Damn Vulnerable Web App 运行一个启用SSL的Damn Vulnerable Web App。 为什么？ 你可能想测试通过SSL进行的Web攻击检测。 构建镜像 docker build -t dvwassl:latest . 运行容器 docker run -d -p 443:443 dvwassl:latest 自定义SSL证书和密钥 镜像自带预生成的SSL证书和密钥。你也可以使用自己的证书和密钥，或者生成新的： openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem...

bore

bore A modern, simple TCP tunnel in Rust that exposes local ports to a remote server, bypassing standard NAT connection firewalls. That's all it does: no more, and no less. Installation requires Rust, see alternatives below cargo install bore-cli On your local machine bore local 8000 --to bore.pu...

CVE-2022-44268-ImageMagick-Vulnerable-Docker-Environment

CVE-2022-44268 Lectura Arbitraria de Archivos Locales de ImageMagick https://www.metabaseq.com/imagemagick-zero-days/ Basado en el PoC CVE-2022-44268 ImageMagick Arbitrary File Read PoC, creé un entorno de prueba de vulnerabilidades usando docker. Uso get image docker pull...