fuzzer-testing

fuzzer-testing Standardized Docker images for evaluating open-source fuzzers, fully integrated with the corpora for easy experimentation. Supported / Included Fuzzers AFL github.com/google/AFL AFLplusplus github.com/AFLplusplus Honggfuzz github.com/google/honggfuzzz QSYM sslab-gatech/qsym Eclipse...

dockerized-android

Dockerized Android Dockerized Android is a container-based framework that allows to execute and Android Emulator inside Docker and control it through a browser. This project has been developed in order to provide a starting point for integrating mobile security components into Cyber Ranges but it...

yeti

Yeti Platform Yeti aims to bridge the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline for DFIR teams. It was born out of frustration of having to answer the question "where have I seen this artifact before?" or "how do I search for IOCs related t...

ingress-nginx-0.21-1.19.5

BUILD: cd ./ingress-nginx-0.21-1.19.5 cd images/nginx/ make cd - cd images/e2e/ make docker-build cd - e2etag=docker images|grep e2e|awk 'print $2' sed -i "s/e2e:v12232020-dce860a/e2e:$e2etag/" build/go-in-docker.sh make echo -e '\n\n\n\n\n' docker images|grep ingress-nginx...

csaf

The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...

cve-images

cve-images — intentionally vulnerable lab images A collection of deliberately vulnerable Docker images for security study in an isolated lab. Started as nginx CVE reproductions and is growing into a broader set of vulnerable-by-design images e.g. DVWA. ⚠️ Safety These images are vulnerable on...

VulApps

VulApps http://vulapps.evalbug.com/ 다양한 취약점 환경을 수집하며, 사용 편의를 위해 통일된 Dockerfile 형식을 사용합니다. 또한 보안 도구 환경도 수집합니다. 마음에 드시면 Star를 눌러주세요. 기여할 생각이 없다면 절대 Fork하지 마세요. 이 프로젝트 GitHub 주소: https://github.com/Medicean/VulApps DockerHub 온라인 이미지 주소 관련 이미지 가져오기 및 사용 docker 명령을 직접 사용하여 관련 이미지를 가져오고 실행합니다. 관련 환경의...

CVE-2021-41773S

Vulnerable docker images for CVE-2021-41773 Apache path traversal This vulnerabiltiy only applies to version 2.4.49 that have specific non-default configs. In certain situations this can result in either file read or code execution. https://twitter.com/ptswarm/status/1445376079548624899 Vulnerabl...

RAUDI

🐳 RAUDI: Regularly and Automatically Updated Docker Images RAUDI Regularly and Automatically Updated Docker Images automatically generates and keep updated a series of Docker Images through GitHub Actions for tools that are not provided by the developers. Table of Contents What is RAUDI Fork Setu...

divd-2021-00038--log4j-scanner

divd-2021-00038--log4j-scanner 이 스캐너는 취약한 log4j 버전과 org/apache/logging/log4j/core/lookup/JndiLookup.class 파일을 찾기 위해 아카이브를 포함한 경로를 재귀적으로 스캔합니다. 현재 허용 목록은 악용할 수 없는 버전을 정의하며, 이 경우 log4j-core 2.17.0 및 2.12.3입니다. 특징 아카이브 안의 아카이브, 그 안의 아카이브 등 모든 아카이브를 재귀적으로 스캔합니다. 알려진 log4j 라이브러리 검색 sha256 해시...

cicd-goat

Deliberately vulnerable CI/CD environment. Hack CI/CD pipelines, capture the flags. 🚩 Created by Cider Security Acquired by Palo Alto Networks. Table of Contents Description Download & Run Linux & Mac Windows Powershell Usage Instructions Take the challenge Troubleshooting Solutions Contributing...

xpdf-docker

Xpdf Docker 이미지 이 저장소에는 CVE-2022-30524에 취약한 Xpdf 버전 4.04용 Docker 이미지가 포함되어 있습니다. 이미지 빌드하기 📦 이 저장소는 다음 3가지 변형으로 이미지를 제공합니다: bullseye/gcc : Debian "bullseye", gcc로 빌드됨 bullseye/afl : Debian "bullseye", afl-clang-fast++로 빌드됨 디버그 프로파일 focal/afl : Ubuntu 20.04 LTS Focal Fossa, afl-clang-fast++로 빌드됨 디버...

clair

Clair 참고 : main 브랜치는 개발 중에 불안정하거나 심지어 망가진 상태 일 수 있습니다. 안정적인 바이너리를 얻으려면 main 브랜치 대신 releases를 사용하세요. Clair는 애플리케이션 컨테이너현재 OCI 및 docker 포함의 취약점에 대한 정적 분석을 위한 오픈 소스 프로젝트입니다. 클라이언트는 Clair API를 사용하여 컨테이너 이미지를 인덱싱한 다음 알려진 취약점과 매칭할 수 있습니다. 우리의 목표는 컨테이너 기반 인프라의 보안에 대해 더 투명한 시각을 제공하는 것입니다. 따라서 프로젝트 이름은 맑음...

dive

dive Docker 이미지, 레이어 콘텐츠를 탐색하고 Docker/OCI 이미지 크기를 줄이는 방법을 발견하는 도구입니다. Docker 이미지를 분석하려면 이미지 태그/ID/다이제스트와 함께 dive를 실행하기만 하면 됩니다: dive 또는 Docker를 통해 직접 dive를 실행할 수 있습니다: alias dive="docker run -ti --rm -v /var/run/docker.sock:/var/run/docker.sock docker.io/wagoodman/dive" dive 예시 dive nginx:latest ...

Kimai <= 2.57.0 - Default APP_SECRET Authentication Bypass

Kimai Docker images = 2.58.0 which generates a random APPSECRET on first boot. Alternatively, manually set a unique APPSECRET in your .env.local file. reference: - https://github.com/advisories/GHSA-jr9p-4h4j-6c58 - https://github.com/kimai/kimai/releases/tag/2.58.0 classification: cve-id:...

cve-2018-9208

CVE-2018-9208 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-9208 Image author: https://github.com/lcashdol/Exploits/tree/master/CVE-2018-9208...

pulsar-docker-images-patch-CVE-2021-44228

Patch pulsar images with Apache Log4J 2.17.1 upgrade Covers CVE-2021-44228, CVE-2021-45046, CVE-2021-45105 CVE-2021-44832 See Log4J Security Vulnerabilities and upgrades for more information. see the Dockerfile for the solution Building and pushing patched docker images example usage: build and t...

Command Injection

Overview @nx/docker is a The Nx Plugin for Docker to aid in containerizing projects. Affected versions of this package are vulnerable to Command Injection via the docker tag, docker push, and docker images calls in the release pipeline, where registry URL, repository name, version scheme,...

CVE-2026-76227 Renovate 42.68.1 before 42.96.3 and 43.0.0 before 43.4.4 Environment Variable Exposure

Renovate versions from 42.68.1 before 42.96.3 and from 43.0.0 before 43.4.4, including the renovate/renovate Docker images, and Mend Renovate CE/EE images renovate-ce, renovate-ee-server, renovate-ee-worker from 13.3.0 before 13.6.0, fail to restrict environment variables to an allowlist when...

CVE-2026-76227 Renovate 42.68.1 before 42.96.3 and 43.0.0 before 43.4.4 Environment Variable Exposure

Renovate versions from 42.68.1 before 42.96.3 and from 43.0.0 before 43.4.4, including the renovate/renovate Docker images, and Mend Renovate CE/EE images renovate-ce, renovate-ee-server, renovate-ee-worker from 13.3.0 before 13.6.0, fail to restrict environment variables to an allowlist when...