cve-2016-7434

CVE-2016-7434 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2016-7434 Image author: https://github.com/opsxcq/exploit-CVE-2016-7434...

dockerized-android

Dockerized Android Dockerized Android is a container-based framework that allows to execute and Android Emulator inside Docker and control it through a browser. This project has been developed in order to provide a starting point for integrating mobile security components into Cyber Ranges but it...

CVE-2026-25177

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

CVE-2022-42889

CVE-2022-42889 Python script for CVE-2022-42889 To test this locally follow the docker POC: https://github.com/karthikuj/cve-2022-42889-text4shell-docker For a PHP version of this: https://github.com/ClickCyber/cve-2022-42889 If youre running this and exploiting it locally, the IP you need to use...

day01-sessionreaper-lab

Day 1 — SessionReaper-style Vulnerable Lab Educational This is a tiny lab that simulates the core idea reported for CVE-2025-54236 “SessionReaper”: improper validation of nested JSON leading to dangerous code paths. This is not Magento/Adobe Commerce; it's a minimal educational replica to practic...

yara

!IMPORTANT This project is in maintenance mode. More info: https://virustotal.github.io/yara-x/blog/yara-x-is-stable/ YARA in a nutshell YARA is a tool aimed at but not limited to helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malwar...

cve-2019-10678

CVE-2019-10678 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2019-10678 Image author: https://github.com/joshuacox/mkdomoticz...

Privilege-Escalation

⬆️ Privilege Escalation for Pentesters A practical Privilege Escalation cheat sheet and reference guide designed for CTF players, penetration testers, and cybersecurity learners to understand how attackers escalate privileges on compromised systems 🌐 Connect With Us 🔵 Telegram – Join Channel ⚫...

cyberpanel

🛠️ CyberPanel Web Hosting Control Panel powered by OpenLiteSpeed, designed to simplify hosting management. 🔧 Features & Services 🔐 Different User Access Levels via ACLs. 🌌 Auto SSL for secure websites. 💻 FTP Server for file transfers. 🕒 Light-weight DNS Server PowerDNS. 🔐 phpMyAdmin to manage...

FFM

Freedom Fighting Mode FFM FFM is a hacking harness that you can use during the post-exploitation phase of a red-teaming engagement. The idea of the tool was derived from a 2007 conference from @thegrugq. It was presented at SSTIC 2018 video and the accompanying slide deck is available at this url...

CVE-2022-27251

CVE-2022-27251 Remote Code Execution in LocalStack 0.12.6 Due to the lack of sanitization on user input on the Lambda API handler field whilst spawning Lambda functions and the way Docker containers are insecurely spawned, an injection can be provided through AWS CLI in the --handler option to be...

Nightingale

Nightingale: Docker for Pentesters This project is supported by: | ---|--- Nightingale is a ready-to-use, multi-architecture Docker toolkit for pentesting and security research. It gives you a reproducible environment with curated tools for web, network, mobile, API, OSINT, and forensics workflow...

polymorph

Polymorph Polymorph is a tool that facilitates the modification of network traffic on the fly by allowing the execution of Python code on network packets that are intercepted in real time. This framework can be used to modify in real time network packets that implement any publicly specified...

cve-2019-9194

CVE-2019-9194 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2019-9194 Image author: https://github.com/cved-sources/cve-2019-9194...

cve-2017-5941-poc-docker-lab

CVE-2017-5941 — node-serialize Untrusted Deserialization RCE PoC ⚠️ For lab / self-assessment only. Use only on systems you own or are authorized to test. This repository provides: A minimal PoC script to reproduce CVE-2017-5941 against a vulnerable Node.js app that uses node-serialize = 0.0.4. Tw...

Docker-Security

Docker Security This is the OWASP Docker Top 10. It's a work in progress. About this document This document describes the most important 10 security bullet points for building a secure containerized environment. You can use it as a specification sheet if you start from scratch, alternatively...

CVE-2021-44228-VULN-APP

CVE-2021-44228-VULN-APP NOTE: This is a vulnerable virtual machine for showing what actually is this vulnerability log4j, and so on! Installation: root@kitploit: cd CVE-2021-44228-VULN-APP/ docker build -t log4j-shell-poc . docker run --network host log4j-shell-poc Listening on port 8080...

CVE-2021-41091

CVE-2021-41091 This exploit offers an in-depth look at the CVE-2021-41091 security vulnerability and provides a step-by-step guide on how to utilize the exploit script to achieve privilege escalation on a host. Vulnerability Summary CVE-2021-41091 is a flaw in Moby Docker Engine that allows...

ditto

Ditto is a small tool that accepts a domain name as input and generates all its variants for an homograph attack as output, checking which ones are available and which are already registered. PoC domains https://tᴡitter.com/ https://clᴏudflare.com Using with Docker The image on docker hub is...

Docker-breakout-runc

Docker breakout via runc Originally from : https://github.com/Frichetten/CVE-2019-5736-PoC. This repo is simply me messing around with the PoC and attempting to figure the exploit's flow...