docker-bench-security

Docker Bench for Security The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are all automated, and are based on the CIS Docker Benchmark v1.6.0. We are making this available as an open-source utili...

fast-security-scanners

Escáneres/comprobaciones rápidos de seguridad Una pequeña contribución a la comunidad : Usamos todas estas herramientas en evaluaciones de seguridad y en nuestro servicio de monitoreo de vulnerabilidades Verifique si su dominio tiene una toma de control de NS DNS Repo docker run --dns=8.8.8.8 -e...

cve-2019-9978

CVE-2019-9978 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2019-9978 Image author: https://github.com/cved-sources/cve-2019-9978...

EUVD-2026-75681

Angular SSR: XSS via Unescaped Processing Instruction Nodes in Fallback Raw-Content Elements...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

Labtainers

Labtainers: Un framework de laboratorio cibernético basado en Docker Labtainers incluye más de 50 ejercicios de laboratorio cibernético y herramientas para crear los tuyos propios. Importa una única VM appliance o instálalo en un sistema Linux y tus estudiantes habrán terminado con el...

cve-2019-6340

CVE-2019-6340 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2019-6340 Image author: https://github.com/cved-sources/cve-2019-6340...

cve-2018-3810

CVE-2018-3810 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-3810 Image author: https://github.com/cved-sources/cve-2018-3810...

botb

Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...

truehunter

Truehunter The goal of Truehunter is to detect encrypted containers using a fast and memory efficient approach without any external dependencies for ease of portability. It was designed to detect Truecrypt and Veracrypt containers, however it may detect any encrypted file with a 'header' not...

PwnFox

PwnFox PwnFox es una extensión de Firefox/Burp que proporciona herramientas útiles para tu auditoría de seguridad. Si eres usuario de Chrome, puedes visitar https://github.com/nccgroup/autochrome. PwnFox Funcionalidades Un solo clic en BurpProxy Perfiles de Contenedores Registrador de PostMessage...

vulmap

🌟 Vulmap - Web vulnerability scanning and verification tools Click here for the English Version Vulmap is a web vulnerability scanning and verification tool. It can scan and exploit vulnerabilities in webapps. Currently supported webapps include activemq, flink, shiro, solr, struts2, tomcat, unom...

dirtypipe-ebpf_detection

dirtypipe-ebpfdetection -- Dirtypipe detection tool This program was made to detect Dirty Pipe exploitation attempts thanks to eBPF. It also monitors nonvulnerable kernels and docker containers. 🛫 If you want more details on how it works please read the blog post ! 🛬 How does it works? Default...

whalescan

Whalescan Escáner de vulnerabilidades para contenedores de Windows. Primeros pasos root@kitploit: git clone https://github.com/saira-h/whalescan pip install -r requirements.txt python main.py Descripción general Whalescan realiza varias comprobaciones de referencia, así como la verificación de...

dockerevil

dockerevil A simple repository to store my security flaws in the docker technology 2016 - 2017 Docker API Privilege EscalationLPE/RPE Escalate from Offline Server/Minimal Images/Build from TAR Dockerfile Docker SUDO Privilege Escalation PoC Nmap Scripts 2019 CodeStudent1995 Based Exploit OpenShif...

whalescan

Whalescan Released as open source by NCC Group Plc - https://www.nccgroup.com/ Developed by Saira Hassan @saibersaira https://github.com/nccgroup/whalescan Released under Apache license 2.0, see LICENSE for more information Introduction Whalescan is a vulnerability scanner for Windows containers,...

CVE-2026-39808

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

CVE-2026-25177

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

cosign

cosign Firma de contenedores OCI y otros artefactos con Sigstore! Cosign tiene como objetivo hacer de las firmas infraestructura invisible. Cosign admite: "Firma sin claves" con la autoridad certificadora Fulcio del bien público de Sigstore y el registro de transparencia Rekor por defecto Firma c...

CVE-2026-73519-WolfStack-PoC

CVE-2026-73519 — WolfStack Hardcoded Cluster Secret → Unauthenticated RCE PoC for a hardcoded default authentication secret in WolfStack that lets a remote, unauthenticated attacker run arbitrary commands as root inside any managed Docker/LXC container. | ---|--- CVE| CVE-2026-73519 CNA| VulnChec...