beagle

Beagle 1. About Beagle 2. Installation 1. Docker 2. Python Package 3. Configuration 3. Web Interface 1. Uploading Data 2. Browsing Existing Graphs 3. Graph Interface 1. Inspecting Nodes and Edges 2. Expanding Neighbours 3. Hiding Nodes 4. Running Mutators 5. Toggling Node and Edge Types 6...

distro_checker

distrochecker Pruebas de explotación entre distribuciones - Docker Pruebas de explotación entre distribuciones - 2ª parte - Vagrant...

witcher

witcher Implement and monitor Appsec control at scale. Requirements NodeJS 20.13 Tested on Mac Ubuntu How to install root@kitploit: $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ npm i Build a Docker image root@kitploit: $ git clone [email protected]:mf-labs/witcher.gi...

Sublist3r

About Sublist3r Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing,...

CVE-2019-17633

CVE-2019-17633 Eclipse Che CSRF que conduce a RCE Este error permite que un sitio web remoto cree e inicie un contenedor Docker arbitrario en máquinas que ejecuten Che antes de las versiones 7.3.0 y 7.4.1 cuando un usuario visita una página web. Vulnerabilidad Se trata de un error de CSRF que...

shhgit

🚨 shhgit is no longer maintained. If you need support or consultation for your secret scanning endeavours, drop me an e-mail [email protected] 🚨 shhgit helps secure forward-thinking development, operations, and security teams by finding secrets across their code before it leads to a security...

docker-tor-hiddenservice-nginx

Easily create and run hidden services Easily run a hidden service inside the Tor network with this container Generate the skeleton configuration for you hidden service, replace for your hidden service pattern name. Example, if you want to your hidden service contain the word 'boss', just use this...

docker-tor-hiddenservice-nginx

轻松创建和运行隐藏服务 使用此容器在Tor网络中轻松运行隐藏服务 为你的隐藏服务生成骨架配置，将 替换为你的隐藏服务模式名称。例如，如果你想让隐藏服务包含单词 'boss'，直接使用这个单词作为参数。你可以使用正则表达式，比如 ^boss，将生成一个以 'boss' 开头的地址。请注意，模式越长，生成所需的时间就越长。 root@kitploit: docker run -it --rm -v $pwd/web:/web \ strm/tor-hiddenservice-nginx generate 创建一个名为 'hiddensite' 的容器来提供你生成的隐藏服务...

vulnerable-container-hub

El Proyecto OWASP Vulnerable Container Hub Antecedentes Existen muchos repositorios que ofrecen entornos vulnerables, como aplicaciones web, contenedores o máquinas virtuales, para quienes quieren aprender seguridad, ya que esto ayuda no solo a estudiantes o a quienes se han incorporado...

cve-2015-3306

cve-2015-3306 imagen docker hackarada/cve-2015-3306 Destinado para uso personal root@kitploit: docker build -t hackarada/cve-2015-3306 docker run --rm -it -p 21:21 -p 80:80 hackarada/cve-2015-3306...

cve-2016-10033

CVE-2016-10033 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2016-10033 Image author: https://github.com/Medicean/VulApps/tree/master/p/phpmailer/1...

cve-2017-8917

CVE-2017-8917 Esto es parte de Cved: una herramienta para gestionar contenedores docker vulnerables. Cved: https://github.com/git-rep-src/cved Fuente de la imagen: https://github.com/cved-sources/cve-2017-8917 Autor de la imagen: https://github.com/Medicean/VulApps/tree/master/j/joomla/2...

metasploitable3

Metasploitable3 Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit. Metasploitable3 is released under a BSD-style license. See COPYING for more details. Quick-start To...

cve-2019-12735

cve-2019-12735 Docker image that lets me study the exploitation of the VIM exploit here Affected Software Vim 8.1.1365 up to and excluding NeoVim 0.3.6 up to and excluding Install root@kitploit: on Host $ make build $ make run $ make attach This brings you into the container with the vulnerable V...

bitcrook

Bitcrook 集中并加快OSINT调查 查看路线图 目录 信息 关于 免责声明 更新日志 预览 致谢 使用 安装 CLI GUI Docker 认证 信息 关于 Bitcrook 是一个开源情报工具，旨在集中所有进行调查所需的工具。尽管调查仍然需要人工交互来串联线索，但该界面可以根据个人需求进行定制，以加快尽职调查的过程。某些包需要认证密钥，而其他包则不需要。更多信息请参见包类型表格。Bitcrook 可以集成到您的应用程序中，也可以直接从终端/网络浏览器使用。 免责声明...

poc-2025-9074

CVE-2025-9074 | Docker API CVE-2025-9074 PoC Proof-Of-Concept Un framework de explotación sofisticado para CVE-2025-9074, dirigido a endpoints de la API de Docker no autenticados con un shell de comandos interactivo integrado. Resumen Esta herramienta automatiza la explotación de instancias de...

CVE-2026-20896

CVE-2026-20896: PoC de omisión de autenticación en la imagen Docker de Gitea !WARNING Usa este PoC solo en un laboratorio local o contra un sistema que estés autorizado explícitamente a probar. https://github.com/user-attachments/assets/b73af2fe-0e59-438b-80d6-be93fd75697b Resumen CVE-2026-20896 ...

lab-cve-2023-4863

CVE-2023-4863 — libwebp Exploitation Lab Reproduction of CVE-2023-4863 heap buffer overflow in libwebp in a fully isolated automated Docker environment. Based on the practice from the Ethical Hacking module of CEFIRE. What this lab does Spins up eight containers on a private network:...

decider

Decider 本作品采用知识共享署名 4.0 国际许可协议进行许可。 本项目使用了 MITRE ATT&CK® — ATT&CK 使用条款。 📰 3.0.0 — Kiosk 版本来了 Decider 现在无需登录即可使用，并且已适配响应式设计。 内容更新简化为复制文件并重启 Docker。 Docker 配置变化较大，没有从 2 到 3 的明确升级路径，建议直接全新安装 3。 但数据库结构保持不变，因此可利用 Decider 2.x.y 来编辑内容。 这是 Firefox 浏览器——但在移动设备上也能正常工作！ 🤔 这是什么？ ⏩ 简明说明...

decider

Decider This work is licensed under a Creative Commons Attribution 4.0 International License. This project makes use of MITRE ATT&CK® - ATT&CK Terms of Use. 📰 3.0.0 - Kiosk is Here Decider is now login-less and responsive. Content updates have been simplified to copying files and restarting Docke...