CVE-2026-39808

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

CVE-2026-25177

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

CVE-2022-27251

CVE-2022-27251 Ejecución remota de código en LocalStack 0.12.6 Debido a la falta de sanitización de la entrada del usuario en el campo del controlador de la API de Lambda al generar funciones Lambda, y a la forma insegura en que se generan los contenedores Docker, se puede proporcionar una...

CVE-2021-44228-VULN-APP

CVE-2021-44228-VULN-APP NOTE: This is a vulnerable virtual machine for showing what actually is this vulnerability log4j, and so on! Installation: root@kitploit: cd CVE-2021-44228-VULN-APP/ docker build -t log4j-shell-poc . docker run --network host log4j-shell-poc Listening on port 8080...

Docker-breakout-runc

Escape de Docker mediante runc Originalmente de : https://github.com/Frichetten/CVE-2019-5736-PoC. Este repositorio es simplemente yo jugando con el PoC e intentando entender el flujo del exploit...

cve-2021-44228-log4j-test

cve-2021-44228-log4j-test Test 1. LDAP Server and Exploit File Download Server 1.1 Running Docker-compose docker-compose.yml root@kitploit: version: '2' services: dockerdj: image: openidentityplatform/opendj:latest containername: ldap environment: ROOTUSERDN: "cn=han" ROOTPASSWORD: "han" BASEDN:...

cve-2016-10033-45

To build the dockers: $ sudo docker build . -t ep4/5.2.17 change 5.2.17 to 18 and 20. to run the dockers: $ sudo docker run -p 7001:80 ep4/5.2.17 change to 7001/7002/7003 and 5.2.17/18/20 in the respective folders...

CVE-2025-9074-Docker-Desktop-API-Escape-PoC

🐚 docker-shell A lightweight, dependency-free bash script that gives you an emulated interactive shell inside a Docker container — using nothing but curl, dd, od, and awk. No Python, no jq, no editor required. Built for environments where you only have raw shell access and need to exec commands...

Snyk Scan

Bitbucket Pipelines Pipe: Snyk This pipe uses Snyk to find, fix and monitor known vulnerabilities in your app dependencies and docker image. YAML Definition Add the following snippet to the script section of your bitbucket-pipelines.yml file: root@kitploit: - pipe: snyk/snyk-scan:1.0.2 variables:...

CVE-2024-21626-demo

CVE-2024-21626-demo Demo for the LT at Container Runtime Meetup 5. This is to raise awareness of the attack risk based on publicly known information, and misuse is strictly prohibited. Slides Container Runtime Meetup 5 - Can You Really Trust That Image? Taking Host Root with CVE-2024-21626 Loggin...

motionEye-RCE-through-config-parameter

MotionEye RCE via Client-Side Validation Bypass Summary During security testing of a MotionEye instance running in Docker, it was observed that client-side validation within the web UI can be bypassed. This allows arbitrary input to be submitted, including payloads that can trigger execution on t...

CVE-2026-34040-PoC

CVE-2026-34040 — Bypass del plugin AuthZ de Docker/Moby PoC de laboratorio KO: Es un proyecto de reproducción de laboratorio de una vulnerabilidad que bypasea el plugin de autorización AuthZ de Docker Moby utilizando un cuerpo de solicitud de más de 1MB. EN: Una reproducción de laboratorio de una...

heartbleed-bug

heartbleed-bug Este repositorio tiene como objetivo describir la vulnerabilidad Heartbleed CVE-2014-0160 y cómo reproducirla. ¡Solo debe usarse para pruebas! Explicación de la configuración imagen Docker y máquina virtual bee-box Añadir nuevas funcionalidades a la herramienta heartbleed Añadir...

ensimag-secu3a-cve-2024-22416

CVE-2024-22416 Informe de referencia: GHSA-pgpj-v85q-h5fm Este repositorio contiene una configuración de docker compose que configura tanto un servidor pyLoad como un servidor atacante que solo proporciona un csrf.html. Para probarlo usted mismo, simplemente ejecute docker composer up necesita...

android-kernel-exploitation

Android カーネルエクスプロイテーション 目的 このワークショップの目的は、Android プラットフォームにおけるカーネル脆弱性解析 とエクスプロイテーション を始めることです。 使用方法 リポジトリをクローンします root@kitploit: git clone https://github.com/cloudfuzz/android-kernel-exploitation /workshop Github Pages URL https://cloudfuzz.github.io/android-kernel-exploitation/ ワークショップ動画 カーネル構築用...

docker-confluence-patched

docker-confluence-patched Patched Confluence 7.12.2 CVE-2021-26084...

CVE-2026-73519-WolfStack-PoC

CVE-2026-73519 — WolfStack Hardcoded Cluster Secret → Unauthenticated RCE PoC for a hardcoded default authentication secret in WolfStack that lets a remote, unauthenticated attacker run arbitrary commands as root inside any managed Docker/LXC container. | ---|--- CVE| CVE-2026-73519 CNA| VulnChec...

monitorsfour

MonitorsFour — HackTheBox Platform: HackTheBox OS: Windows Status: Retired — full walkthrough published. Full walkthrough: l3dsec.com/walkthroughs/monitorsfour-htb Attack Chain root@kitploit: Nmap → nginx 80 + WinRM 5985 → ffuf → cacti.monitorsfour.htb Cacti → unauthenticated API endpoint →...

docker-log4shell

docker-log4shell Simple Go app / Docker image for playing with the CVE-2021-44228 vulnerability. Hosts a simple file server and an ldap server that provides any classes hosted in the file server: ldap://ip:1389/Hello - http://ip:8080/Hello.class root@kitploit: docker build -t log4shell . docker r...

asn-search

asn-search Esta herramienta volcará la información ASN utilizando Hurricane Electric Esta herramienta se ejecuta en Docker, y puedes usar una imagen que ya he creado: root@kitploit: docker run -it --cap-add=SYSADMIN tuxotron/asn-search O puedes construir la tuya propia: root@kitploit: docker buil...