pentagi

PentAGI P enetration testing A rtificial G eneral I ntelligence Join the Community! Connect with security researchers, AI enthusiasts, and fellow ethical hackers. Get support, share insights, and stay updated with the latest PentAGI developments. ⠀ Table of Contents Overview Features Architecture...

docker-cve-2022-39253-poc

docker host file read using cve-2022-39253 poc PoC reproduce environment $ docker run --name=cve-2022-39253 -ti -d ssst0n3/dockerarchive:gitcve-2022-39253 $ docker attach --detach-keys ctrl-x cve-2022-39253 use ctrl-x to exit container's terminal wait minutes for environment starting ... ... Ubun...

CVE-2019-5736-Dockerattack-and-security-mechanism

CVE-2019-5736-attack-and-security-mechanism In this project, we found a recent attack through the malicious container and implemented a security mechanism to stop it. Introduction Cyber-attacks have become a critical challenge for both companies and small businesses, largely due to vulnerabilitie...

CVE-2023-7028

CVE-2023-7028lab Implementation and exploitation of CVE-2023-7028 account takeover vulnerability related to GO-TO CVE weekly articles of the 11th week. This repository contains a Docker setup and a Python script to test the CVE-2023-7028 vulnerability in GitLab. The provided script automates the...

exploit-CVE-2014-6271

exploit-CVE-2014-6271 docker run --rm -d -p :80 vulnerables/cve-2014-6271 sh exploit-cli.sh...

heartbleed-poc

HeartBleed Tester & Exploit NB Nearly all the tools nmap, metasploit, nessus, even burp have the most up to date versions of their scanners. These tools were released at the early stages when tools were still being developed. Rather use those than these now. Tool Guide If you want to mass scan, t...

CVE-Factory

CVE-Factory：コードセキュリティ脆弱性のためのエキスパートレベルのエージェントタスクのスケーリング CVE-Factoryは、完全自動化されたエンドツーエンドのCVE再現のためのマルチエージェントシステムです。CVEレコードを入力すると、システムは自動的に詳細を調査し、テストケースを生成し、Docker環境を構築し、各脆弱性が悪用可能かつパッチ可能であることを検証します。このパイプラインは、人手を介さずにCVEメタデータを再現可能でテスト可能な脆弱性環境に変換します。 ⚠️ セキュリティ警告 :...

lk_scraper

LinkedIn Scraper Scrapes Any LinkedIn Data Installation $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a Selenium server $ docker run -d -...

wifi-cracking

Wi-Fi Cracking Crack WPA/WPA2 Wi-Fi Routers with Airodump-ng and Aircrack-ng/Hashcat. This is a brief walk-through tutorial that illustrates how to crack Wi-Fi networks that are secured using weak passwords. It is not exhaustive, but it should be enough information for you to test your own...

xpdf-docker

Xpdf Docker Images This repository contains docker images for Xpdf version 4.04, which is vulnerable to CVE-2022-30524. Building the Images 📦 This repository contains the image in 3 flavours: bullseye/gcc : Debian "bullseye", built with gcc bullseye/afl : Debian "bullseye", built with...

silicon2022-capturetheflag

silicon2022-ctf 소개 RootTheBox 플랫폼을 사용하는 41개 플래그 CTF입니다. 인프라는 대부분 Azure Kubernetes Service에 배포되었습니다. 터미널 챌린지는 수정된 버전의 WeTTY를 사용하여 Docker 이미지로 배포되었습니다. 빌드 대부분의 챌린지는 Docker 이미지로 빌드됩니다. 해당 챌린지 디렉토리로 이동하여 Dockerfile을 빌드해 자신만의 인스턴스를 실행하거나, 기타 지침은 README를 확인할 수 있습니다. 솔루션 각 챌린지의 솔루션은 각자의 solutions 폴더에서 찾...

CVE-2025-68613-n8n-lab

CVE-2025-68613 Local n8n Lab This repository provides a simple Docker Compose setup that runs a vulnerable n8n instance for local testing of CVE-2025-68613. Requirements Docker Desktop or Docker Engine Docker Compose v2 Quick start 1. Start the container: docker compose up -d 2. Open n8n in your...

CVE-2019-19356

CVE-2019-19356 cd CVE-2019-19356 docker-compose up -d...

CVE-2025-9074

CVE-2025-9074 – Full Docker Escape on Windows & macOS Docker Desktop 📌 Description Docker Desktop exposes the internal Docker Engine API at http://192.168.65.7:2375 to any running container — with no authentication and no access control. Because the engine itself can mount the host filesystem, a...

iris-web

침해 대응 조사 시스템 현재 버전 v2.4.20 온라인 데모 IRIS Iris는 침해 대응 담당자가 조사 중 기술적 세부 정보를 공유할 수 있도록 지원하는 웹 기반 협업 플랫폼입니다. 목차 시작하기 IrisWeb 실행하기 설정 버전 관리 시연 문서 업그레이드 API 도움말 고려 사항 라이선스 시작하기 Iris는 두 가지 주요 부분, IrisWeb과 IrisModules로 나뉩니다. IrisWeb은 Iris의 핵심웹 인터페이스, 데이터베이스 관리 등을 포함하는 웹 애플리케이션입니다. IrisModules는 핵심의 확장 기능으로,...

CVE-2017-5638-Attack-and-Defense

Apache Struts2 S2-045 Defense & Exploitation Lab A Docker-based security lab demonstrating both exploitation and defense against the Apache Struts2 S2-045 vulnerability CVE-2017-5638. This lab includes: 1. Vulnerable Application : Struts 2.3.31 vulnerable to S2-045 for exploitation demonstration ...

log4shell-docker-lab

Log4Shell docker lab for CVE-2021-44228 The components This docker lab makes use of three components, being: The vulnerable spring-boot application An HTTP server that hosts .class files used for remote code execution An LDAP referral server which redirects specific LDAP queries to the HTTP serve...

klar

Klar Clair와 Docker Registry 통합 Clair API v1 및 v3 모두 지원 Klar는 Clairhttps://github.com/coreos/clair를 사용하여 개인 또는 공용 Docker 레지스트리에 저장된 이미지의 보안 취약점을 분석하는 간단한 도구입니다. Klar는 통합 도구로 설계되었으므로 환경 변수에 의존합니다. 종속성이 필요 없는 단일 바이너리입니다. Klar는 Docker 레지스트리와 Clair 간의 이미지 검사를 조정하는 클라이언트 역할을 합니다. 바이너리 설치 가장 간단한 방법은...

klar

Klar Integration of Clair and Docker Registry supports both Clair API v1 and v3 Klar is a simple tool to analyze images stored in a private or public Docker registry for security vulnerabilities using Clair https://github.com/coreos/clair. Klar is designed to be used as an integration tool so it...

scan-cve-2018-8115

/\ / | | / \ | | | / /\ \ / | | | |/ | \ \ / / | | | | '| | | | | | / \ | | || | | | | / | || | | | | || || | // \, |,|,| |/ ||,|| |||, | | | / | || |/ Docker images verifier cli-tool CVE-2018-8115 To help the community stay safe, we at Aqua created an open source tool that tests images...