deep-pwning

Deep-pwning is a lightweight framework for experimenting with machine learning models with the goal of evaluating their robustness against a motivated adversary. Note that deep-pwning in its current state is no where close to maturity or completion. It is meant to be experimented with, expanded...

grype

Grype A vulnerability scanner for container images and filesystems. Features Scan container images , filesystems , and SBOMs for known vulnerabilities see the docs for a full list of supported scan targets Supports major OS package ecosystems Alpine, Debian, Ubuntu, RHEL, Oracle Linux, Amazon...

Exe2Image

Exe2Image A simple utility to convert EXE files to PNG images and vice versa. Download: https://github.com/OsandaMalith/Exe2Image/releases Screenshots Putty.exe converted to an image...

dive

dive 一个用于探索 Docker 镜像、层内容以及发现缩小 Docker/OCI 镜像大小方法的工具。 要分析一个 Docker 镜像，只需使用镜像标签/ID/摘要运行 dive： dive 或者你可以直接通过 Docker 使用 dive： alias dive="docker run -ti --rm -v /var/run/docker.sock:/var/run/docker.sock docker.io/wagoodman/dive" dive 例如 dive nginx:latest 或者如果你想构建镜像然后直接进行分析： dive build -t . 在 macOS...

dockle

Dockle - Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start Dockle helps you: 1. Build Best Practice Docker images 2. Build secure Docker images Checkpoints includes CIS Benchmarks $ brew untap goodwithtech/dockle who use 0.1.16 or older version $ bre...

pisc

Public OCI-Image Security Checker What is it? PISC Public OCI-Image or docker-image Security Checker is command-line tool to assess the security of OCI container images. Exits with code 1 if any of the following conditions are met: malware 🍄 exploits 🐙, hack-tools 👾, backdoors 🐴, crypto-miners 💰,...

SuperMem

Descripción general Un script de Python desarrollado para procesar imágenes de memoria de Windows según el tipo de triage. Requisitos Python3 Bulk Extractor Volatility2 con Community Plugins Volatility3 Plaso Yara Cómo usar Triage rápido python3 winSuperMem.py -f memdump.mem -o output/ -tt 1 Tria...

darling

Darling Darling is a runtime environment for macOS applications. Please note that most GUI applications will not run at the moment. Download Packages for some distributions are available for download under releases. Build Instructions For build instructions, visit Darling Docs. Prefixes Darling h...

CVE-2023-36884

CVE-2023-36884 Esta es una solución de emergencia mientras Microsoft aborda la vulnerabilidad. CVE-2023-36884 en imágenes Docx de referencia: a61b2eafcf39715031357df6b01e85e0d1ea2e8ee1dfec241b114e18f7a1163f pic.twitter.com/CxBYlWyvlB — Kimberly @StopMalvertisin 12 de julio de 2023...

fuzzer-testing

fuzzer-testing Standardized Docker images for evaluating open-source fuzzers, fully integrated with the corpora for easy experimentation. Supported / Included Fuzzers AFL github.com/google/AFL AFLplusplus github.com/AFLplusplus Honggfuzz github.com/google/honggfuzzz QSYM sslab-gatech/qsym Eclipse...

cve-2018-16509

CVE-2018-16509 Esto es parte de Cved: una herramienta para gestionar contenedores docker vulnerables. Cved: https://github.com/git-rep-src/cved Fuente de la imagen: https://github.com/cved-sources/cve-2018-16509 Autor de la imagen: https://github.com/knqyf263/CVE-2018-16509...

layerleak

layerleak Layerleak es un escáner de secretos en imágenes OCI de solo lectura. Resuelve referencias de imágenes públicas sin necesidad de un demonio Docker, verifica el contenido descargado contra los digests OCI, reconstruye el estado de las capas, inspecciona artefactos eliminados y metadatos d...

RAUDI

🐳 RAUDI：定期自动更新的 Docker 镜像 RAUDI （Regularly and Automatically Updated Docker Images）通过 GitHub Actions 自动生成并持续更新一系列 Docker 镜像，适用于那些开发者并未提供的工具。 目录 什么是 RAUDI Fork 设置 测试 本地使用 可用工具 工具结构 辅助函数 示例 发音 贡献 致谢 许可证 什么是 RAUDI RAUDI 能将你从手动创建和管理大量 Docker 镜像的繁琐工作中解放出来。每次软件更新时，若想使用最新功能或依赖不再兼容，都需要更新 Docker 镜像。...

dep-scan

介绍 OWASP dep-scan 是一个基于已知漏洞、安全公告和项目依赖的许可证限制的下一代安全与风险审计工具。支持本地仓库和容器镜像作为输入，该工具非常适合集成到ASPM/VM平台和CI环境中。 目录 功能特性 精确的可达数据流 可达性矩阵 Rust 可达性（通过 rusi） Go 可达性（通过 golem） .NET 可达性（通过 dosai） JVM、JavaScript、Python 和 PHP 可达性（通过 atom） 漏洞数据源 Linux 发行版 快速开始 本地扫描项目（Python 版本） 独立二进制文件（无需 Python 或 Node.js） 本地扫描容器（Pyth...

steganographer

Steganography in Python This script will hide files inside images and save the modified image to disk The maximum size of file which can be hidden inside an image depends on the dimension of the image. maxfilesize = heightofimage widthofimage 6 / 8 bytes '100k words.txt' is hidden in...

hashr

HashR: Genera tu propio conjunto de hashes Tabla de contenidos HashR: Genera tu propio conjunto de hashes Tabla de contenidos Acerca de Requisitos Compilar el binario de HashR y ejecutar pruebas Configurar HashR HashR usando docker Configuración del sistema operativo y herramientas de terceros...

dockerized-android

Dockerized Android Dockerized Android is a container-based framework that allows to execute and Android Emulator inside Docker and control it through a browser. This project has been developed in order to provide a starting point for integrating mobile security components into Cyber Ranges but it...

syft

Syft Una herramienta CLI y una biblioteca de Go para generar una Lista de Materiales de Software SBOM a partir de imágenes de contenedores y sistemas de archivos. Excepcional para la detección de vulnerabilidades cuando se usa con un escáner comoGrype. Características Genera SBOM para imágenes de...

unblob

unblob Accurate, fast, and easy-to-use extraction suite for binary blobs. unblob parses unknown binary blobs for 78+ archive, compression, and file-system formats , extracts their content recursively, and carves out unknown chunks. It is the perfect companion for extracting, analyzing, and revers...

cve-2018-9208

CVE-2018-9208 Esto es parte de Cved: una herramienta para gestionar contenedores Docker vulnerables. Cved: https://github.com/git-rep-src/cved Fuente de la imagen: https://github.com/cved-sources/cve-2018-9208 Autor de la imagen: https://github.com/lcashdol/Exploits/tree/master/CVE-2018-9208...