Joomla-CMS-Full-Lifecycle-Pentest

Pruebas de Penetración de CMS de Ciclo Completo Joomla 4.2.5 📌 Resumen del Proyecto Este proyecto demuestra una prueba de penetración de ciclo completo realizada sobre un CMS de código abierto Joomla 4.2.5. Toda la prueba sigue metodologías estándar OWASP/PTES desde el despliegue del laboratorio...

MobSF_AI

MobSF AI Sidecar Este proyecto añade un asistente de chat impulsado por IA al Mobile Security Framework MobSF. Permite a los analistas de seguridad hacer preguntas sobre el informe de análisis generado por MobSF directamente desde la interfaz, aprovechando el modelo de OpenAI. Características...

POC-CVE-2026-5027

Description Proof of concept exploit code for CVE-2026-5027 Usage python3 poc.py -u -c -a "bash command arg File written to Docker container disk...

CVE-2023-50164-PoC

CVE-2023-50164 Apache Struts path traversal to RCE vulnerability - Proof of Concept This PoC has been made to test an RCE Remote Code Execution by exploiting the Apache Struts2 vulnerability. Build the image and run a container: root@kitploit: $ DOCKERBUILDKIT=1 docker build . -t struts2-rce-poc ...

CVE-2026-23744-Lab

CVE-2026-23744 – MCPJam Inspector Docker Lab This repo is a tiny Docker lab to compare a vulnerable vs patched build of MCPJam Inspector for CVE-2026-23744. It’s meant for learning and for building a public security portfolio: quick setup, clear evidence, and screenshots. ⚠️ Ethics / scope : Only...

CVE-2026-1357-Lab

CVE-2026-1357 — WPvivid Backup & Migration Vuln vs Patched Docker Lab Local-only Docker lab for comparing WPvivid Backup & Migration: Vulnerable: 0.9.123 Patched: 0.9.124 Built for learning practice lab setup, verification, logs, notes. Anything PoC-related is intended to run only inside this lab...

CVE-2021-4034

CVE-2021-4034 - Docker Container Deliberately Vulnerable Version Docker PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...

CVE-2026-27607

CVE-2026-27607 Доказательство концепции для CVE-2026-27607, опубликовано как GHSA-w5fh-f8xh-5x3p. Запуск Требуются Node.js и docker + compose. Установите зависимости: npm ci Запустите уязвимый экземпляр RustFS: docker compose up дождитесь запуска Запустите демо: ./exploit.js...

CVE-2025-54352

CVE-2025-54352 PoC Usage Steps to install and test the WordPress PoC: 1. Install a fresh version of WordPress using Docker: 1.1 Start the MySQL database container: root@kitploit: docker run --name wp-db -e MYSQLDATABASE=wp-db -e MYSQLUSER=wpuser -e MYSQLPASSWORD=password -e...

CVE-2021-4034

CVE-2021-4034 root@kitploit: docker build -t pwnkit . docker run -it pwnkit ./blasty...

CVE-2021-32157

CVE-2021-32157 Make it possible to build a vulnerable webmin virtual environment as a container using docker Build If there is an error related to download, please comment on line 15 of dockerfile and run line 14 of dockerfile. root@kitploit: docker build -t VulnWebmin . docker run --name...

CVE-2026-1312-Testing

CVE-2026-1312 Reproduction Clone the Repository Setup Requirements: Python 3.12 installed Docker Desktop installed and running Run the Script ./runcve20261312.sh Files runcve20261312.sh Main execution script docker-compose.yml Docker configuration .dockerfile Docker image setup requirements.txt...

CVE--2026-24061

CVE-2026-24061 CVE-2026-24061 nlss/xinetd docker inetutils JayGLXR CVE-2026-24061 PoC...

Demo_CVE-2025-3248

DemoCVE-2025-3248 — Educational PoC Purpose: Simulate the vulnerability CVE-2025-3248 in an isolated environment for information security learning: build a lab, observe exploitable behavior, and discuss mitigation measures. ⚠️ LEGAL & ETHICAL DISCLAIMER ETHICAL USE ONLY All content in this...

CVE-2026-21876

CVE-2026-21876 Lab Environment for CVE-2026-1357 1. Build the environment sudo apt update && sudo apt install docker.io docker-compose -y sudo systemctl start docker git clone Link of Repo sudo chmod -R 755 . sudo docker-compose up --build -d FireFox: http://localhost:8083 2. Exploit the...

Telnet-TestVuln-CVE-2026-24061

Telnet Docker Test Vulb CVE-2026-24061 root@kitploit: docker build -t telnet-vuln . Run root@kitploit: docker run -d \ --name telnet-vuln \ -p 127.0.0.1:2323:23 \ telnet-vuln...

docker-socket-risk-demos

docker-socket-risk-demos Companion repo for the video: Stop Mounting docker.sock — Run Trivy Without Giving Away Root Access — inspired by CVE-2026-33634 https://www.youtube.com/watch?v=xLTYzfPY3xI This repo contains the sample web app and Claude Code prompt used in the video to demonstrate: 1. W...

EUVD-2026-81265

A flaw was found in quay-builder-qemu. A remote attacker could exploit this by compromising the upstream Noelware/docker-manifest-action used in the release workflow, which is pinned to a mutable branch. This allows the attacker to inject arbitrary code, leading to the exfiltration of sensitive...

Linux Distros Unpatched Vulnerability : CVE-2026-79994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the...

VulnCheck KEV: CVE-2026-40242

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.17.3, the /api/templates/fetch endpoint accepts a caller-supplied url parameter and performs a server-side HTTP GET request to that URL without authentication and without URL scheme or host validation...