trivy

📖 Documentation Trivy pronunciation is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues. Targets what Trivy can scan: Container Image Filesystem Git Repository remote Virtual Machine Image Kubernetes...

CVE-2025-32375

Setup for the vulnerable version. Start the vulnerable container: docker compose up Create a listener e.g. ncat: ncat -klnv 1337 Run the exploit: python3 exploit.py You should receive an HTTP request in the ncat window with the contents of the OS command id by default if everything worked as...

Telnet-TestVuln-CVE-2026-24061

Telnet Docker Test Vulb CVE-2026-24061 docker build -t telnet-vuln . Run docker run -d \ --name telnet-vuln \ -p 127.0.0.1:2323:23 \ telnet-vuln...

CVE-2022-0944

CVE-2022-0944 SQLPad - Template injection This is a blind vulnerability, meaning that the output is directly returned in the response. Exploit Use the script with the following command: python3 exploit.py --url http://localhost:13000 --command 'ls -la /tmp/test' --username admin --password passwo...

osint_toolkit

OSINT Toolkit Warning OSINT Toolkit is not production ready yet. This is an early prototype, that still needs some work to be done. A fullstack web application built for security analysts OSINT Toolkit is a self-hostable, on-demand analysis platform designed for security specialists. It...

attack-stix-data

ATT&CK® STIX Data MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and ...

subfinder

Fast passive subdomain enumeration tool. Features • Install • Usage • API Setup • Library • Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...

CVE-2018-7600

LAB 9-CVE-2018-7600 I. SYSTEM ANALYSIS Identify Attack Surface Start by listing the running containers: docker ps From the docker ps results, the container for this Lab is: p1/lab09:latest This container exposes port: 0.0.0.0:8011-80/tcp This indicates that the service inside the container is...

docker-hacklab

Docker Hacklab My personal hacklab, create your own. French article: https://blog.ston3o.me/creer-hacklab-virtuel-docker/ Quick Start $ docker run --name hacklab --net=host --privileged -it ston3o/docker-hacklab zsh | || | /\ / | |/ / | /\ | | |/ \ | ' /dev/null 2&1; docker start hacklab /dev/nul...

CVE-2021-40438

CVE-2021-40438 build docker build -t cve-2021-40438:1.0 . run docker run --rm -d -p 4444:80 cve-2021-40438:1.0 check CVE-2021-40438 ./main.sh...

hiphp

🚨 New Build Available! WebHole now supports all major web languages. Check it out on GitHub: WebHole on GitHub Hiphp Free & Open Source project for creating a backdoor to control PHP-based websites. !Install On Ubuntuhttps://github.com/yasserbdj96/hiphp/actions/workflows/ubuntu-install.yml/badge....

log4j-docker-vaccine

Log4j Docker Vaccine A containerized way to run the log4j vaccine offered by Cyberreason https://github.com/Cybereason/Logout4Shell Make it go Clone this repo: git clone https://github.com/jeffbryner/log4j-docker-vaccine.git Edit the containers.env file to hold an accurate private or public IP/DN...

threagile

Threagile Agile Threat Modeling Toolkit Threagile see threagile.io for more details is an open-source toolkit for agile threat modeling: It allows to model an architecture with its assets in an agile fashion as a YAML file directly inside the IDE. Upon execution of the Threagile toolkit all...

bento

This software is exprimental but we accept suggestions and contributions Bento Toolkit for PT and CTF A bento 弁当, bentō is a single-portion take-out or home-packed meal of Japanese origin. Bento Toolkit is a simple and minimal docker container for penetration testers and CTF players. It has the...

cve-2022-22965

Spring4Shell - CVE-2022-22965 Build let's clone the repository, build and run the container $ git clone https://github.com/twseptian/cve-2022-22965.git $ cd cve-2022-22965 $ docker build . -t spring4shell-poc $ docker run -p 8080:8080 --name spring4shell-poc spring4shell-poc check the access usin...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

DC30_Workshop

DEF CON 30 Workshop Mainframe Container The scripts here are used to build the MVS 3.8j virtual mainframe for the DEFCON 30 workshop. Thank you for taking a look at the DEFCON 30 Mainframe Buffer Overflow workshop. Use docker This docker container has everything you need to learn how to do MVS...

webdiscover

/ / /\ \ | | / \ / / / \ ' \ / /\ / / |/ / \ \ / / \ '| \ /\ / / | | / ///| \ \ | \ V / / | / / |./ /,' ||/\/ / || The purpose of this script is to automate the web enumeration process and search for exploits and vulns for your target attack surface. Added Tools dependencies are installed...

deepce

deepce . == === /"""""""""""""""""/ === / ===- \ X / \ \ / \/ / / / / / / / / \ ENUMERATE / // / / / // / / / ESCALATE ,/// ./// ESCAPE // Website Docker Enumeration, Escalation of Privileges and Container Escapes DEEPCE In order for it to be compatible with the maximum number of...

exploit-CVE-2017-6090

Containerized exploitable CVE-2017-6090 This projects builds a container running PhpCollab 2.5.1, containing a remote code execution vulnerability as detailed in CVE-2017-6090. In addition, there is a docker-compse file to start that container and mysql to show the demo, and instructions to explo...