dockerized-android

Dockerized Android Dockerized Android est un framework basé sur des conteneurs qui permet d'exécuter un émulateur Android dans Docker et de le contrôler via un navigateur. Ce projet a été développé pour fournir un point de départ pour intégrer des composants de sécurité mobile dans des Cyber...

day09-bentoml-deser-lab

Day 09 — CVE-2025-27520 BentoML-style insecure deserialization — Local Docker lab This lab reproduces the insecure deserialization class that led to CVE-2025-27520. It is intentionally vulnerable for educational purposes. Run locally in Docker only. Quickstart Build and run: docker build -t...

docker-tor-hiddenservice-nginx

Créez et exécutez facilement des services cachés Exécutez facilement un service caché à l'intérieur du réseau Tor avec ce conteneur Générez la configuration squelette pour votre service caché, remplacez par le nom du motif de votre service caché. Par exemple, si vous voulez que votre service cach...

canarytokens-docker

Dockerized Canarytokens от Thinkst Applied Research Обзор Canarytokens помогают отслеживать активность и действия в вашей сети. Если у вас возникли проблемы, пожалуйста, ознакомьтесь с нашим FAQ здесь или создайте issue, и мы постараемся ответить вам как можно скорее. Содержание Кодекс поведения...

base-lamp

BASE-LAMP This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/base-lamp Image based on: https://github.com/Medicean/VulApps/tree/master/base/lamp...

CVE-2024-24760

CVE-2024-24760 mailcow: Docker Container Exposure to Local Network...

Log4Shell-Honeypot

Log4Shell Honeypot Enhanced dockerized honeypot for CVE-2021-44228 with comprehensive security features, monitoring, and alerting capabilities. Features Enhanced Detection Comprehensive Pattern Matching : Detects 20+ Log4Shell exploit patterns including JNDI, LDAP, RMI, DNS, and environment...

cve-2019-5420

CVE-2019-5420 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2019-5420 Image author: https://github.com/knqyf263/CVE-2019-5420...

POC-CVE-2026-5027

Description Proof of concept exploit code for CVE-2026-5027 Usage python3 poc.py -u -c -a "bash command arg File written to Docker container disk...

cved

CVED A tool to manage vulnerable docker containers INSTALLATION qt = 5.x docker git qmake make sudo make install USAGE Create the docker group if it doesn't already exist. sudo groupadd docker Add your user to the docker group. sudo usermod -aG docker $USER Log out and log back in so that your...

CVE-2026-23744-Lab

CVE-2026-23744 – MCPJam Inspector Docker Lab This repo is a tiny Docker lab to compare a vulnerable vs patched build of MCPJam Inspector for CVE-2026-23744. It’s meant for learning and for building a public security portfolio: quick setup, clear evidence, and screenshots. ⚠️ Ethics / scope : Only...

CVE-2025-60787

CVE-2025-60787 CVE-2025-60787 Poc - RCE - MotionEye = 0.43.1b4 Original link: https://github.com/prabhatverma47/motionEye-RCE-through-config-parameter MotionEye RCE via Client-Side Validation Bypass Summary During security testing of a MotionEye instance running in Docker, it was observed that...

CVE-2021-4034

CVE-2021-4034 docker build -t pwnkit . docker run -it pwnkit ./blasty...

ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade

SummaryThe dashboard reads its authentication credentials from $ESPHOMEUSERNAME and $ESPHOMEPASSWORD. Earlier versions, and the legacy esphome dashboard, read the bare $USERNAME and $PASSWORD instead. When the env vars were renamed the bare names were dropped with no fallback, so an operator who...

Telnet-TestVuln-CVE-2026-24061

Telnet Docker Test Vulb CVE-2026-24061 docker build -t telnet-vuln . Run docker run -d \ --name telnet-vuln \ -p 127.0.0.1:2323:23 \ telnet-vuln...

heartbleed

heartbleed CVE-2014-0160 OpenSSL Heartbleed Proof of Concept Download and execute the Docker container Vulnerable Nginx server docker run -p 4443:443 -it --rm --name hb gescobero/heartbleed:1.0 Compile Heartbleed attack gcc heartbleed.c -o heartbleed Execute it with Nginx server as target...

CVE-2022-0944

CVE-2022-0944 SQLPad - Template injection This is a blind vulnerability, meaning that the output is directly returned in the response. Exploit Use the script with the following command: python3 exploit.py --url http://localhost:13000 --command 'ls -la /tmp/test' --username admin --password passwo...

CVE-2018-7600

LAB 9-CVE-2018-7600 I. SYSTEM ANALYSIS Identify Attack Surface Start by listing the running containers: docker ps From the docker ps results, the container for this Lab is: p1/lab09:latest This container exposes port: 0.0.0.0:8011-80/tcp This indicates that the service inside the container is...

exploit-CVE-2014-6271

exploit-CVE-2014-6271 docker run --rm -d -p :80 vulnerables/cve-2014-6271 sh exploit-cli.sh...

CVE-2018-16167

Installation and Execution Sequence 0. LogonTracer Installation Download the logontracer version 1.2.0, where a vulnerability was found, from dockerhub. $docker pull jpcertcc/docker-logontracer:v1.2.0 1. LogonTracer Execution Launch it in a container with the following command. $docker run ...