deepce

deepce . == === /"""""""""""""""""/ === / ===- \ X / \ \ / \/ / / / / / / / / \ ENUMERATE / // / / / // / / / ESCALATE ,/// ./// ESCAPE // Sitio web Enumeración de Docker, escalada de privilegios y escapes de contenedores DEEPCE Para que sea compatible con el máximo número de...

oasis

OASIS Offensive AI Security Intelligence Standard — Open-source AI security benchmarking. Benchmark how AI models perform offensive security tasks — vulnerability discovery, exploitation, privilege escalation, and more. Full analysis with MITRE ATT&CK mapping, behavioral scoring, and detailed...

htrace.sh

Description htrace.sh is a shell script for http/https troubleshooting and profiling. It's also a simple wrapper around several open source security tools. For a more detailed understanding of htrace.sh, its parameters, functions and how it all works, run htrace.sh --examples or see the Wiki...

rtl_433

rtl433 rtl433 despite the name is a generic data receiver, mainly for the 433.92 MHz, 868 MHz SRD, 315 MHz, 345 MHz, and 915 MHz ISM bands. The official source code is in the https://github.com/merbanan/rtl433/ repository. See also a list of software that works with rtl433 in the wiki. For more...

ThreatPursuit-VM

/ || | / | \ | | \ / \ \ \ | | | Y | | \ / / | | || || || \ || |/ | \ | | \ / | | | \ \ | | | | /| | \ | | | || | | /|/ || / |/|||| || / MANDIANT THREAT INTELLIGENCE VM Version 2020.1 [email protected] Created by: Dan Kennedy Jake Barteaux @day1player Blaine Stancill @MalwareMechanic...

graphicator

Graphicator Graphicator is a GraphQL "scraper" / extractor. The tool iterates over the introspection document returned by the targeted GraphQL endpoint, and then re-structures the schema in an internal form so it can re-create the supported queries. When such queries are created is using them to...

dockerscan

DockerScan v2.0 El escáner de seguridad Docker más completo PorDaniel Garcia cr0hn | GitHub | Sitio web Características • Instalación • Inicio rápido • Documentación • Casos de uso • Novedades • Contribuir 📑 Tabla de Contenidos Resumen Características Novedades en v2.0 Instalación Inicio rápido U...

dockerscan

DockerScan v2.0 The Most Comprehensive Docker Security Scanner ByDaniel Garcia cr0hn | GitHub | Website Features • Installation • Quick Start • Documentation • Use Cases • What's New • Contributing 📑 Table of Contents Overview Features What's New in v2.0 Installation Quick Start Usage Private...

CVE-2017-5638-POC

CVE-2017-5638-POC Vulnerable server setup and proof of concept of CVE-2017-5638 remote code execution vulnerability in an Apache component Server The vulnerable server runs in a docker container, the image can be created using the Dockerfile, running this in the same folder of it: docker build...

dns-honeypot

My First 24 Hours Running a DNS Honeypot As an engineer who spends most of my days knee-deep in observability tooling, I get the occasional idea that I just have to run with. This was one of those experiments: spin up a DNS resolver on a clean IP that nobody advertises, then let the internet talk...

cve-2022-22965

Spring4Shell - CVE-2022-22965 Construcción vamos a clonar el repositorio, construir y ejecutar el contenedor $ git clone https://github.com/twseptian/cve-2022-22965.git $ cd cve-2022-22965 $ docker build . -t spring4shell-poc $ docker run -p 8080:8080 --name spring4shell-poc spring4shell-poc...

vuln-scanner

vuln-scanner Una plataforma automatizada de evaluación de vulnerabilidades que orquesta 210 herramientas de seguridad de código abierto , agrega y deduplica hallazgos, opcionalmente encadena herramientas en un grafo de flujo de datos de descubrimiento , ejecuta una capa de análisis LLM compatible...

CVE-2019-5736-POC

Breaking out of Docker via RunC A proof of concept code for CVE-2019-5736 This POC is heavily based on YuvalAvra's POC. I do not claim any credit for the code utilised in this POC. More information about this vulnerability and a demonstration of how it can be exploited can be found in the...

ingress-nginx-0.21-1.19.5

BUILD: cd ./ingress-nginx-0.21-1.19.5 cd images/nginx/ make cd - cd images/e2e/ make docker-build cd - e2etag=docker images|grep e2e|awk 'print $2' sed -i "s/e2e:v12232020-dce860a/e2e:$e2etag/" build/go-in-docker.sh make echo -e '\n\n\n\n\n' docker images|grep ingress-nginx...

PEzor-Docker

PEzor-Docker With the help of this kali linux image, you can easily access PEzor on your system! Basically, this image is built from the kalilinux/kali-rolling image and then the PEzor shellcode and PE packer is installed on top of it. Sometimes, it's vital to have access to PEzor, specially in a...

mariadb-13-rce-lab

Laboratorio de RCE MariaDB 13.0.1-rc Ejecución remota de código en la imagen Docker estándar sin modificar de MariaDB 13.0.1-rc como uid 999 mysql. Dos variantes de exploit: Variante| Archivo| Requisitos| Notas ---|---|---|--- SQL puro recomendado| exploitpuresql.py| una cuenta MariaDB de bajos...

CVE-2022-39275

CVE-2022-39275 POC para CVE-2022-39275. Recursos para el aviso: NIST NVD CVE.org Github Security Advisory Este es un fork del commit hash: 47f9f5fb29be2b5892c79ace4f23022f397a0a5e enlace, simplemente vuelto a subir, ya que también había submódulos de git que debían cambiarse. Configuración del PO...

goscan

GoScan is an interactive network scanner client, featuring auto-completion, which provides abstraction and automation over nmap. Although it started as a small side-project I developed in order to learn @golang, GoScan can now be used to perform host discovery, port scanning, and service...

jsteg

jsteg go get lukechampine.com/jsteg jsteg is a package for hiding data inside jpeg files, a technique known as steganography. This is accomplished by copying each bit of the data into the least-significant bits of the image. The amount of data that can be hidden depends on the filesize of the jpe...

WannaRace

🚀 WannaRace WebApp intentionally made vulnerable to Race Condition 🤖 Description Race Condition vulnerability can be practiced in the developed WebApp. Task is to buy a Mega Box using race condition that costs more than available vouchers. Two challenges are made for practice. Challenge B is to b...