CVE-2024-24760

CVE-2024-24760 mailcow: Docker Container Exposure to Local Network...

sub404

Sub404: A Fast Tool To Check Subdomain Takeover Vulnerability What is Sub 404 Sub 404 is a tool written in python which is used to check possibility of subdomain takeover vulnerability and it is fast as it is asynchronous. Why During recon process you might get a lot of subdomainse.g more than 10...

reternal-quickstart

RE:TERNAL Примечание: все еще в разработке, используйте только для тестирования и не открывайте интерфейсы! Текущий compose пока не работает, пробуйте, только если знаете, что делаете RE:TERNAL — это централизованный сервис оркестрации purple team для управления сторонними C2-фреймворками. Агенты...

reternal-quickstart

RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...

anchore-engine

Anchore Engine IMPORTANT NOTE As of 2023, Anchore Engine is no longer maintained. There will be no future versions released. Users are advised to use Syft and Grype. For users interested in a supported commercial solution for container scanning and complaiance, schedule a demo to see Anchore...

ransomwatch

RansomWatch RansomWatch is a ransomware leak site monitoring tool. It will scrape all of the entries on various ransomware leak sites, store the data in a SQLite database, and send notifications via Slack or Discord when a new victim shows up, or when a victim is removed. Note: RansomWatch isn't...

Gorsair

Gorsair Gorsair is a penetration testing tool for discovering and remotely accessing Docker APIs from vulnerable Docker containers. Once it has access to the docker daemon, you can use Gorsair to directly execute commands on remote containers. Exposing the docker API on the internet is a tremendo...

instaloctrack

instaloctrack TL;DR : ascineema, video of the project A tool to scrape geotagged locations on Instagram profiles. Output in JSON & interactive map. requirements root@kitploit: sudo apt install chromium-chromedriver && chmod a+x /usr/bin/chromedriver 🛠️ installation root@kitploit: git clone...

ipmap

English readme • 简体中文 readme • 正體中文 readme • Lengua española readme • Deutsche readme • Svenska readme • 한국어 readme • Français readme • हिन्दी readme • Português readme • • • • • • •...

dmi-tcat

DMI TCAT The Digital Methods Initiative Twitter Capture and Analysis Toolset DMI-TCAT allows one to retrieve and collect tweets from Twitter and to analyze them in various ways. Installation You can find detailed installation instructions in the wiki Requirements Twitter API credentials these can...

CVE-2020-23342

CVE-2020-23342 Note: When pulling this repository and running it with Docker in a local VM, remember to change the host value on line 24 of config.py to the VM's IP address...

CVE-2019-5736

CVE-2019-5736 Reference: cve-2019-5736-poc 1. edit poc command in stage2.cve 2. build docker docker build -t cve . 3. run docker docker run -d cve /bin/bash -c "tail -f /dev/null" 4. backup docker-runc cp /usr/bin/docker-runc /usr/bin/docker-runc.bak 5. docker exec -it docker-id /bin/bash 6. edit...

Container_escape

일회용 Ubuntu 컨테이너 VM 이 디렉터리는 일회용 Ubuntu QEMU 게스트 내부에서 Ubuntu Docker 컨테이너를 빌드하고 실행합니다. PoC는 게스트로 복사되며 호스트 스크립트에 의해 실행되지 않습니다. 호스트 의존성 Bash QEMU x86-64 및 qemu-img curl OpenSSH 클라이언트 도구 xorriso VMPAYLOADCONSOLE=1을 사용할 때만 socat KVM은 사용 가능할 때 사용되며, 그렇지 않으면 QEMU는 TCG로 폴백합니다. 골든 이미지 빌드 root@kitploit:...

ThreatPursuit-VM

root@kitploit: / || | / | \ | | \ / \ \ \ | | | Y | | \ / / | | || || || \ || |/ | \ | | \ / | | | \ \ | | | | /| | \ | | | || | | /|/ || / |/|||| || / MANDIANT THREAT INTELLIGENCE VM Version 2020.1 [email protected] root@kitploit: Created by: Dan Kennedy Jake Barteaux @day1player...

dns-honeypot

My First 24 Hours Running a DNS Honeypot As an engineer who spends most of my days knee-deep in observability tooling, I get the occasional idea that I just have to run with. This was one of those experiments: spin up a DNS resolver on a clean IP that nobody advertises, then let the internet talk...

CVE-2019-5736-POC

Breaking out of Docker via RunC A proof of concept code for CVE-2019-5736 This POC is heavily based on YuvalAvra's POC. I do not claim any credit for the code utilised in this POC. More information about this vulnerability and a demonstration of how it can be exploited can be found in the...

CVE-2022-39275

CVE-2022-39275 POC for CVE-2022-39275. Resources for the advisory: NIST NVD CVE.org Github Security Advisory This is a fork of commit hash: 47f9f5fb29be2b5892c79ace4f23022f397a0a5e link, just re-pushed as there were git submodules that also had to be changed. POC-Setup Follow the setup guide. In...

Log4Shell-Honeypot

Log4Shell Honeypot Enhanced dockerized honeypot for CVE-2021-44228 with comprehensive security features, monitoring, and alerting capabilities. Features Enhanced Detection Comprehensive Pattern Matching : Detects 20+ Log4Shell exploit patterns including JNDI, LDAP, RMI, DNS, and environment...

CVE-2019-5736-PoC

CVE-2019-5736-PoC PoC for CVE-2019-5736 Created with help from @singe, @cablethief, and @feexd Tested on Ubuntu 18.04, Debian 9, and Arch Linux. Docker versions 18.09.1-ce and 18.03.1-ce. This PoC does not currently work with Ubuntu 16.04 and CentOS. Go checkout the exploit code from Dragon Secto...

cve-2019-5420

CVE-2019-5420 Это часть Cved: инструмент для управления уязвимыми docker-контейнерами. Cved: https://github.com/git-rep-src/cved Источник образа: https://github.com/cved-sources/cve-2019-5420 Автор образа: https://github.com/knqyf263/CVE-2019-5420...