vaas-cve-2014-0160

Vulnerability as a Service - CVE 2014-0160 A Debian Wheezy Linux system with a vulnerable version of libssl and openssl and a web server to showcase CVS-2014-0160, a.k.a. Heartbleed. Overview This docker container is based on Debian Jessie and has been modified to use a vulernable version of libs...

cve-2018-10933

CVE-2018-10933 libssh authentication bypass, vulnerable Docker container on port 2222 for exploitation...

cve-2018-15961

CVE-2018-15961 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-15961 Image author: https://bintray.com/eaps/coldfusion/cf%3Acoldfusion/2018.0.0...

SpoolSploit

SpoolSploit A collection of Windows print spooler exploits containerized with other utilities for practical exploitation. Summary SpoolSploit is a collection of Windows print spooler exploits containerized with other utilities for practical exploitation. A couple of highly effective methods would...

windows

Windows !Buildbuildurl !Versiontagurl !Sizetagurl !Packagepkgurl !Pullshuburl Windows inside a Docker container. Features ✨ Runs Windows inside a Docker container Automatic download and hands-free installation Supports modern and legacy Windows releases Near-native performance with KVM accelerati...

cve-2017-8046

CVE-2017-8046 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2017-8046 Image author: https://github.com/Medicean/VulApps/tree/master/s/spring/1...

HeartBleed

HeartBleed vulnerability in docker 1. git clone https://github.com/Saymeis/HeartBleed.git 2. cd HeartBleed 3. sudo docker build -t heartbleed -f Dockerfile . 4. sudo docker run -p 80:80 -p 443:443 -d heartbleed...

heartbleed

heartbleed Execute the heartbleed exploit python heartbleed.py 127.0.0.1 -p 8443 Setup and run server Install docker and run the daemon Install the docker container with docker pull hmlio/vaas-cve-2014-0160 Run the container with a port mapping docker run -d -p 8443:443 hmlio/vaas-cve-2014-0160...

PIE-Stack-Clash-CVE-2017-1000253

PIE-Stack-Clash-CVE-2017-1000253 Demo-ing CVE-2017-1000253 in a container. This demo relies on Qualys POC code that performs the exploit over CentOS. Install a vulnerable kernel 1.Install CentOS 7 2.Install Docker 3.Edit the /etc/yum.repos.d/CentOS-Vault.repo file: 1.Change each entry to path to...

wetland

Wetland Wetland is a high interaction SSH honeypot，designed to log brute force attacks.What's more, wetland will log shell、scp、sftp、exec-command、direct-forward、reverse-forward interation performded by the attacker. Wetland is based on python ssh module paramiko. And wetland runs as a...

threagile

Threagile Agile Threat Modeling Toolkit Threagile see threagile.io for more details is an open-source toolkit for agile threat modeling: It allows to model an architecture with its assets in an agile fashion as a YAML file directly inside the IDE. Upon execution of the Threagile toolkit all...

cve-2014-0050

cve-2014-0050 CVE-2014-0050 Vulnerable site sample This project aims to demonstrate the CVE-2014-0050 exploitation for educational purpose. For more informations, see : https://www.trustwave.com/Resources/SpiderLabs-Blog/CVE-2014-0050--Exploit-with-Boundaries,-Loops-without-Boundaries/...

deepce

deepce . == === /"""""""""""""""""/ === / ===- \ X / \ \ / \/ / / / / / / / / \ ENUMERATE / // / / / // / / / ESCALATE ,/// ./// ESCAPE // Website Docker Enumeration, Escalation of Privileges and Container Escapes DEEPCE In order for it to be compatible with the maximum number of...

cve-2019-10678

CVE-2019-10678 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2019-10678 Image author: https://github.com/joshuacox/mkdomoticz...

EXPLOIT-CVE-2026-26216

CVE-2026-26216 — Crawl4AI unauthenticated RCE via hooks GHSA-5882-5rx9-xgxp CVSS 10.0 · pre-auth RCE · CWE-94 Code Injection Unauthenticated remote code execution on the Crawl4AI Docker server field. This code is executed with exec inside a "homemade sandbox" — a restricted builtins dictionary...

log4j-vulnerability

LOG4J Vulnerability A Java-based project presenting how to exploit CVE-2021-44228 vulnerability. https://user-images.githubusercontent.com/13152452/147803050-458593e9-4b54-4e1f-ba07-802866b9b43e.mp4 Requirements A Linux-based operating system: I used Ubuntu Desktop 20.10 64 bits OpenJDK 17.0.1: T...

cve-2017-5638

cve-2017-5638 cve-2017-5638 Vulnerable site sample This project aims to demonstrate the CVE-2017-5638 exploitation for educational purpose. For more informations, see https://cwiki.apache.org/confluence/display/WW/S2-045 Legal Disclaimer This project is made for educational and ethical testing...

subfinder

Fast passive subdomain enumeration tool. Features • Install • Usage • API Setup • Library • Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...

CVE-2019-5010

CVE-2019-5010 Author: Jonathan M. Wilbur Copyright Year: 2019 License: MIT License How to use 1. Install all dependencies by running npm install. 2. Compile the project using npm run build. 3. Run node ./dist/index.js to create the evil certificate in ./dist/cve-2019-5010-cert.pem. 4. Bring up th...

cve-2018-11776

CVE-2018-11776 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-11776 Image author: https://github.com/knqyf263/CVE-2018-11776...