tarnish

tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...

witcher

witcher Implement and monitor Appsec control at scale. Requirements NodeJS 20.13 Tested on Mac Ubuntu How to install $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ npm i Build a Docker image $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ docker build ...

PipeViewer

Un outil GUI pour visualiser les tubes nommés Windows et rechercher des permissions non sécurisées. L'outil a été publié dans le cadre d'une recherche sur les tubes nommés Docker : "Breaking Docker Named Pipes SYSTEMatically: Docker Desktop Privilege Escalation – Part 1" "Breaking Docker Named...

log4j-docker-vaccine

Log4j Docker Vaccine A containerized way to run the log4j vaccine offered by Cyberreason https://github.com/Cybereason/Logout4Shell Make it go Clone this repo: git clone https://github.com/jeffbryner/log4j-docker-vaccine.git Edit the containers.env file to hold an accurate private or public IP/DN...

vapi

vAPI vAPI est une Interface Programmée Vulnérable et Adversaire Vulnerable Adversely Programmed Interface, auto-hébergeable, qui reproduit les scénarios du Top 10 des API OWASP sous forme d'exercices. Prérequis PHP MySQL PostMan MITM Proxy Installation Docker docker-compose up -d Installation...

vapi

vAPI vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios in the means of Exercises. Requirements PHP MySQL PostMan MITM Proxy Installation Docker docker-compose up -d Installation Manual Copying the Code cd git clone...

ditto

Ditto is a small tool that accepts a domain name as input and generates all its variants for an homograph attack as output, checking which ones are available and which are already registered. PoC domains https://tᴡitter.com/ https://clᴏudflare.com Using with Docker The image on docker hub is...

CVE-2018-19131

CVE-2018-19131 Demo Author: Jonathan M. Wilbur Copyright Year: 2018 License: MIT License Do not do anything illegal with this. This is not malware. This is just a proof of concept. This is a demo of CVE-2018-19131, which runs in a Docker Compose app. This library builds Squid version 3.5.27, whic...

PoC-for-CVE-2025-9074

CVE-2025-9074 - Docker API Unauthenticated Access PoC 📌 Overview This repository provides a Proof-of-Concept PoC exploit for CVE-2025-9074 , which involves unauthenticated exposure of the Docker Engine API on TCP port 2375. An attacker who can access this exposed API can: Interact with the Docker...

CVE-2020-10665

CVE-2020-10665 Docker Desktop Local Privilege Escalation POC for Docker Desktop Local Privilege Escalation. Built based on the writeup at https://www.activecyber.us/activelabs/docker-desktop-local-privilege-escalation-cve-2020-10665. Hardlink creation adapted from...

tcconfig

.. contents:: tcconfig :backlinks: top :depth: 2 Résumé tcconfig est un wrapper de la commande tc. Il facilite la mise en place du contrôle de trafic bande passante, latence, perte de paquets, corruption de paquets, etc. sur une interface réseau ou un conteneur Docker veth. |PyPI pkg ver|...

CVE-2021-23394

elFinder CVE-2021-23394 Reproduction Setup This repository contains a reproduction setup for CVE-2021-23394 Arbitrary File Execution in elFinder using Docker. It sets up four environments to compare vulnerable and patched versions across Apache and Nginx. Overview The setup includes: 1. Apache...

klar

Klar Intégration de Clair et du registre Docker supporte à la fois les API Clair v1 et v3 Klar est un outil simple pour analyser les images stockées dans un registre Docker privé ou public à la recherche de vulnérabilités de sécurité en utilisant Clair https://github.com/coreos/clair. Klar est...

klar

Klar Integration of Clair and Docker Registry supports both Clair API v1 and v3 Klar is a simple tool to analyze images stored in a private or public Docker registry for security vulnerabilities using Clair https://github.com/coreos/clair. Klar is designed to be used as an integration tool so it...

CVE-2022-42889

CVE-2022-42889 Python-скрипт для CVE-2022-42889 Чтобы протестировать это локально, следуйте Docker POC: https://github.com/karthikuj/cve-2022-42889-text4shell-docker Для PHP-версии: https://github.com/ClickCyber/cve-2022-42889 Если вы запускаете это и эксплуатируете локально, IP-адрес, который...

Spring4Shell-POC

Spring4Shell-POC Local reproduction process of Spring4Shell vulnerability Environment Preparation Environment: docker, docker-compose mvn package, generate ./target/ROOT.warshell mvn package Start the serviceshell docker-compose up -d Stop serviceshell docker-compose down Reproduction Process Run...

node-ip-vex

node-ip-vex This sample project depends on the node-ip npm package which is vulnerable to CVE-2024-29415. However, because our project does not directly use the vulnerable function .isPublic, it is not exploitable to CVE-2024-29415. Run an analysis with Docker Scout I can package my project as a...

h2t

h2t - Outil de Durcissement HTTP Description h2t est un outil simple pour aider les administrateurs systèmes à durcir leurs sites web. Jusqu'à présent, h2t vérifie les en-têtes du site web et recommande comment les améliorer. Dépendances Python 3 colorama requests Installation $ git clone...

cve-2022-42889-text4shell-docker

Установите Maven - maven-linux 1. Установка Maven для создания fat jar mvn clean install 2. Сборка Docker docker build --tag=text4shell . 3. Запуск Docker docker run -p 80:8080 text4shell 4. Проверьте работу приложения http://localhost/text4shell/attack?search= 5. Атака может быть выполнена путём...

CVE-2019-17633

CVE-2019-17633 Eclipse Che CSRF leading to RCE This bug allows a remote website to create and start an arbitrary docker container on machines running Che before versions 7.3.0 and 7.4.1 when a user visits a webpage. Vulnerability This is a CSRF bug that allows a remote website to create and start...