CVE-2021-42013-LAB

CVE-2021-42013-LAB Apache HTTP Server 2.4.50 - RCE Lab exploit.sh :- https://github.com/jas9reet/CVE-2021-42013-LAB/blob/main/exploit.sh Usage docker pull jas9reet/cve-2021-42013-lab docker run -dit -p 8088:80 jas9reet/cve-2021-42013-lab Vulnerable Application Access VICTIM-IP-ADDRESS :8088...

Viper

Comenzando · Documentación VIPER es una plataforma de equipo rojo potente y flexible. Integra las herramientas y funcionalidades principales necesarias para la simulación de adversarios y operaciones de equipo rojo, ayudándole a completar tareas de evaluación de ciberseguridad de manera eficiente...

emba

EMBA The security analyzer for firmware of embedded devices EMBA is designed as the central firmware analysis and SBOM tool for penetration testers, product security teams, developers and responsible product managers. It supports the complete security analysis process starting with firmware...

CVE-2026-50055

cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...

joomla_exploits

Joomla Exploits This repository contains selected Joomla exploit artifacts validated against real Docker Joomla environments. The collection is split by practical offensive utility. real-impact Exploits with direct security impact: RCE, file upload to code execution, SQL injection, sensitive...

dnstwist

See what sort of trouble users can get in trying to type your domain name. Find lookalike domains that adversaries can use to attack you. Can detect typosquatters, phishing attacks, fraud, and brand impersonation. Useful as an additional source of targeted threat intelligence. DNS fuzzing is an...

docker_CVE-2014-6271.

dockerCVE-2014-6271. 1. docker build -t DOCKERIMAGENAME /path/to/dockerfiledirectory 2. docker run -it -d -p 8080:80 DOCKERIMAGENAME 3. verify execution with: docker ps 4. verify web server execution: http://localhost:8080 5. exploit vulnerability : curl -H "user-agent: :; ; echo; echo; /bin/bash...

Onionscan

onionscan deployment note! this repo is a patched version of https://github.com/s-rah/onionscan and is designed to be run from a google cloud shell from hunchly at https://github.com/hunchly/funchly/tree/main/onionscan which has been used as the baseline and modified to also be able to deploy on ...

fast-security-scanners

Escáneres/comprobaciones rápidos de seguridad Una pequeña contribución a la comunidad : Usamos todas estas herramientas en evaluaciones de seguridad y en nuestro servicio de monitoreo de vulnerabilidades Verifique si su dominio tiene una toma de control de NS DNS Repo docker run --dns=8.8.8.8 -e...

CVE-2024-41110-SCAN

CVE-2024-41110 Docker Security Scanner This tool is designed to check a host for vulnerability related to CVE-2024-41110 in Docker installations. It specifically looks for vulnerable versions of Docker and the use of AuthZ plugins, which can potentially lead to security issues. Usage Run the scri...

PoC-for-CVE-2025-9074

CVE-2025-9074 - Docker API Unauthenticated Access PoC 📌 Overview This repository provides a Proof-of-Concept PoC exploit for CVE-2025-9074 , which involves unauthenticated exposure of the Docker Engine API on TCP port 2375. An attacker who can access this exposed API can: Interact with the Docker...

otto-support

Otto Support Customer support MCP server for AI coding assistants. One Go binary, tiered authentication, 19 tools across 4 role levels. Built with mcp-go. Quick Start Option A: Docker container recommended Run everything in an isolated container. Claude Code is pre-installed and the MCP server...

cve-bench

CVE-Bench A benchmark for evaluating LLM agents on fixing real-world security vulnerabilities. Agents run inside sandboxed Docker containers and are scored against the maintainer's security test suite. Requirements Python 3.12+ Docker OPENAIAPIKEY, ANTHROPICAPIKEY, and/or POOLSIDEAPIKEY in your...

Joomla-CMS-Full-Lifecycle-Pentest

Full-Lifecycle CMS Penetration Testing Joomla 4.2.5 📌 Project Overview This project demonstrates a full-lifecycle penetration test conducted on an open-source CMS Joomla 4.2.5. The entire test follows standard methodologies OWASP/PTES from lab deployment up to exploitation, post-exploitation, and...

cve-2022-0185-crash-poc

Container running cve-2022-0185 crash POC This is a docker container that runs the crash POC from https://www.willsroot.io/2022/01/cve-2022-0185.html. The container runs unprivileged as UID 65534. You can also use docker run -u or set a security context with RunAsUser additionally, all should yie...

chepy

Chepy Chepy is a python library with a handy cli that is aimed to mirror some of the capabilities of CyberChef. A reasonable amount of effort was put behind Chepy to make it compatible to the various functionalities that CyberChef offers, all in a pure Pythonic manner. There are some key advantag...

writehat

WriteHat is a reporting tool which removes Microsoft Word and many hours of suffering from the reporting process. Markdown -- HTML -- PDF. Created by penetration testers, for penetration testers - but can be used to generate any kind of report. Written in Django Python 3. Features: Effortlessly...

cve-2017-5941-poc-docker-lab

CVE-2017-5941 — node-serialize Untrusted Deserialization RCE PoC ⚠️ For lab / self-assessment only. Use only on systems you own or are authorized to test. This repository provides: A minimal PoC script to reproduce CVE-2017-5941 against a vulnerable Node.js app that uses node-serialize = 0.0.4. Tw...

HTTP-2-RapidReset-CVE-2023-44487-Testlab

This repo is the source code of my docker lab, made for my thesis research...

CVE-2025-9074-Docker-Desktop-Container-Escape

CVE-2025-9074: PoC de Escape de Contenedor de Docker Desktop Exploit de Prueba de Concepto para CVE-2025-9074 - una vulnerabilidad crítica de escape de contenedor en Docker Desktop que permite acceso no autenticado a la API del Motor Docker. Resumen de la Vulnerabilidad Propiedad| Valor ---|--- I...