attack-stix-data

ATT&CK® STIX Data MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and ...

log4j-docker-vaccine

Log4j Docker Vaccine A containerized way to run the log4j vaccine offered by Cyberreason https://github.com/Cybereason/Logout4Shell Make it go Clone this repo: root@kitploit: git clone https://github.com/jeffbryner/log4j-docker-vaccine.git Edit the containers.env file to hold an accurate private ...

dockerized-android

Dockerized Android Dockerized Android es un marco basado en contenedores que permite ejecutar un Emulador de Android dentro de Docker y controlarlo a través de un navegador. Este proyecto se ha desarrollado con el fin de proporcionar un punto de partida para integrar componentes de seguridad móvi...

wrongsecrets

OWASP WrongSecrets !Docker container testhttps://github.com/OWASP/wrongsecrets/actions/workflow...

windows

Windows...

subfinder

Fast passive subdomain enumeration tool. Features • Install • Usage • API Setup • Library • Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...

CVE-2018-7600

LAB 9-CVE-2018-7600 I. SYSTEM ANALYSIS Identify Attack Surface Start by listing the running containers: docker ps From the docker ps results, the container for this Lab is: p1/lab09:latest This container exposes port: 0.0.0.0:8011-80/tcp This indicates that the service inside the container is...

SpoolSploit

SpoolSploit Una colección de exploits del spooler de impresión de Windows contenerizados con otras utilidades para explotación práctica. Resumen SpoolSploit es una colección de exploits del spooler de impresión de Windows contenerizados con otras utilidades para explotación práctica. Un par de...

cve-2022-22965

Spring4Shell - CVE-2022-22965 Build let's clone the repository, build and run the container root@kitploit: $ git clone https://github.com/twseptian/cve-2022-22965.git $ cd cve-2022-22965 $ docker build . -t spring4shell-poc $ docker run -p 8080:8080 --name spring4shell-poc spring4shell-poc check...

CVE-2026-23744-Lab

CVE-2026-23744 – MCPJam Inspector Docker Lab Этот репозиторий — небольшая Docker-лаборатория для сравнения уязвимой и пропатченной сборок MCPJam Inspector для CVE-2026-23744. Он предназначен для обучения и создания публичного портфолио по безопасности: быстрая настройка, наглядные доказательства ...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

CVE-2021-4034

CVE-2021-4034 root@kitploit: docker build -t pwnkit . docker run -it pwnkit ./blasty...

deepce

deepce root@kitploit: . == === /"""""""""""""""""/ === / ===- \ X / \ \ / \/ / / / / / / / / \ ENUMERATE / // / / / // / / / ESCALATE ,/// ./// ESCAPE // Website Docker Enumeration, Escalation of Privileges and Container Escapes DEEPCE In order for it to be compatible with the maximum...

Telnet-TestVuln-CVE-2026-24061

Telnet Docker Test Vulb CVE-2026-24061 root@kitploit: docker build -t telnet-vuln . Запуск root@kitploit: docker run -d \ --name telnet-vuln \ -p 127.0.0.1:2323:23 \ telnet-vuln...

ghidra

Ghidra dockerisé Construction Depuis le répertoire racine de votre version de Ghidra, exécutez la commande suivante. root@kitploit: ./docker/build-docker-image.sh Cela construira l'image docker ghidra avec une balise correspondant à la version de la version de Ghidra. La variable d'environnement...

cve-2018-17207

CVE-2018-17207 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-17207 Image author: https://github.com/cved-sources/cve-2018-17207...

emba

EMBA The security analyzer for firmware of embedded devices EMBA is designed as the central firmware analysis and SBOM tool for penetration testers, product security teams, developers and responsible product managers. It supports the complete security analysis process starting with firmware...

webdiscover

root@kitploit: / / /\ \ | | / \ / / / \ ' \ / /\ / / |/ / \ \ / / \ '| \ /\ / / | | / ///| \ \ | \ V / / | / / |./ /,' ||/\/ / || The purpose of this script is to automate the web enumeration process and search for exploits and vulns for your target attack surface. Added Tools dependencies...

wetland

Wetland Wetland es un honeypot SSH de alta interacción, diseñado para registrar ataques de fuerza bruta. Además, wetland registrará la interacción de shell, scp, sftp, exec-command, direct-forward, reverse-forward realizada por el atacante. Wetland está basado en el módulo ssh de Python paramiko....

osint_toolkit

OSINT Toolkit Warning OSINT Toolkit is not production ready yet. This is an early prototype, that still needs some work to be done. A fullstack web application built for security analysts OSINT Toolkit is a self-hostable, on-demand analysis platform designed for security specialists. It...