CVE-2019-17633

CVE-2019-17633 Eclipse Che CSRF leading to RCE This bug allows a remote website to create and start an arbitrary docker container on machines running Che before versions 7.3.0 and 7.4.1 when a user visits a webpage. Vulnerability This is a CSRF bug that allows a remote website to create and start...

shhgit

🚨 shhgit is no longer maintained. If you need support or consultation for your secret scanning endeavours, drop me an e-mail [email protected] 🚨 shhgit helps secure forward-thinking development, operations, and security teams by finding secrets across their code before it leads to a security...

docker-tor-hiddenservice-nginx

Easily create and run hidden services Easily run a hidden service inside the Tor network with this container Generate the skeleton configuration for you hidden service, replace for your hidden service pattern name. Example, if you want to your hidden service contain the word 'boss', just use this...

docker-tor-hiddenservice-nginx

Crea y ejecuta servicios ocultos fácilmente Ejecuta fácilmente un servicio oculto dentro de la red Tor con este contenedor Genera la configuración esqueleto para tu servicio oculto, reemplaza por el nombre del patrón de tu servicio oculto. Por ejemplo, si deseas que tu servicio oculto contenga la...

vulnerable-container-hub

The OWASP Vulnerable Container Hub Project Background There are many repositories out there to provide vulnerable environments such as web applications, containers or virtual machines to those who want to learn security, since it helps not only students or someone who recently joined the field to...

cve-2015-3306

cve-2015-3306 imagen docker hackarada/cve-2015-3306 Destinado para uso personal root@kitploit: docker build -t hackarada/cve-2015-3306 docker run --rm -it -p 21:21 -p 80:80 hackarada/cve-2015-3306...

cve-2016-10033

CVE-2016-10033 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2016-10033 Image author: https://github.com/Medicean/VulApps/tree/master/p/phpmailer/1...

cve-2017-8917

CVE-2017-8917 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2017-8917 Image author: https://github.com/Medicean/VulApps/tree/master/j/joomla/2...

metasploitable3

Metasploitable3 Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit. Metasploitable3 is released under a BSD-style license. See COPYING for more details. Quick-start To...

cve-2019-12735

cve-2019-12735 Docker image that lets me study the exploitation of the VIM exploit here Affected Software Vim 8.1.1365 up to and excluding NeoVim 0.3.6 up to and excluding Install root@kitploit: on Host $ make build $ make run $ make attach This brings you into the container with the vulnerable V...

bitcrook

Bitcrook Centraliza y acelera las investigaciones OSINT Ver la hoja de ruta Índice Información Acerca de Descargo de responsabilidad Registro de cambios Vista previa Atribuciones Uso Instalación CLI GUI Docker Autenticación Información Acerca de Bitcrook es un sistema de inteligencia de código...

poc-2025-9074

CVE-2025-9074 | Docker API CVE-2025-9074 PoC Proof-Of-Concept Un framework de explotación sofisticado para CVE-2025-9074, dirigido a endpoints de la API de Docker no autenticados con un shell de comandos interactivo integrado. Resumen Esta herramienta automatiza la explotación de instancias de...

CVE-2026-20896

CVE-2026-20896: Gitea Docker Image Authentication Bypass PoC !WARNING Use this PoC only in a local lab or against a system you are explicitly authorized to test. https://github.com/user-attachments/assets/b73af2fe-0e59-438b-80d6-be93fd75697b Overview CVE-2026-20896 is an authentication bypass in...

lab-cve-2023-4863

CVE-2023-4863 — libwebp Exploitation Lab Reproduction of CVE-2023-4863 heap buffer overflow in libwebp in a fully isolated automated Docker environment. Based on the practice from the Ethical Hacking module of CEFIRE. What this lab does Spins up eight containers on a private network:...

decider

Decider Este trabajo está licenciado bajo una Licencia Creative Commons Attribution 4.0 International. Este proyecto hace uso de MITRE ATT&CK® - Términos de uso de ATT&CK. 📰 3.0.0 - Kiosk ya está aquí Decider ahora es sin inicio de sesión y adaptable. Las actualizaciones de contenido se han...

decider

Decider This work is licensed under a Creative Commons Attribution 4.0 International License. This project makes use of MITRE ATT&CK® - ATT&CK Terms of Use. 📰 3.0.0 - Kiosk is Here Decider is now login-less and responsive. Content updates have been simplified to copying files and restarting Docke...

docker-lab-cve-2017-5638-cve-2021-41773

Laboratorio de Atacante: CVE-2017-5638 & CVE-2021-41773 Un laboratorio de emulación de ataques basado en Docker con 7 hosts, diseñado para demostrar una cadena de eliminación de múltiples etapas, movimiento lateral y detección de IDS multipunto. Resumen Este laboratorio simula un entorno de red...

CVE-2019-16097

CVE-2019-16097-batch Descargo de responsabilidad Solo para uso en investigación de seguridad. No lo utilice para pruebas ilegales. ¡¡¡Las consecuencias son bajo su propia responsabilidad!!! CVE-2019-16097-batch Script de explotación de vulnerabilidad en lote Agregue direcciones objetivo en lote e...

salus

Salus: Guardián de la Seguridad y Protección del Código 🔍 Resumen Salus Security Automation as a Lightweight Universal Scanner, nombrado así en honor a la diosa romana de la protección, es una herramienta para coordinar la ejecución de escáneres de seguridad. Puedes ejecutar Salus en un repositor...

CVE-2021-41773-PoC

CVE-2021-41773-PoC PoC for CVE-2021-41773 with docker to demonstrate Run Just run ./poc.sh. Make sure you have working docker and docker-compose root@kitploit: $ ./poc.sh Creating network "cve-2021-41773-pocdefault" with the default driver Creating cve-2021-41773-pocweb1 ... done...