grype

Grype A vulnerability scanner for container images and filesystems...

dockerized-android

Dockerized Android Dockerized Android is a container-based framework that allows to execute and Android Emulator inside Docker and control it through a browser. This project has been developed in order to provide a starting point for integrating mobile security components into Cyber Ranges but it...

Exe2Image

Exe2Image A simple utility to convert EXE files to PNG images and vice versa. Download: https://github.com/OsandaMalith/Exe2Image/releases Screenshots Putty.exe converted to an image...

covert-control

covert-control Control systems remotely by uploading files to Google Drive, OneDrive, Youtube or Telegram using Python to create the files and the listeners. It allows to create text files, images, audio or videos, with the commands in cleartext or encrypted using AES. covert-googledrive.py -...

steganographer

Steganography in Python This script will hide files inside images and save the modified image to disk The maximum size of file which can be hidden inside an image depends on the dimension of the image. root@kitploit: maxfilesize = heightofimage widthofimage 6 / 8 bytes '100k words.txt' is hidden ...

darling

Darling Darling is a runtime environment for macOS applications. Please note that most GUI applications will not run at the moment. Download Packages for some distributions are available for download under releases. Build Instructions For build instructions, visit Darling Docs. Prefixes Darling h...

cluster-image-scanner

ClusterImageScanner Discover vulnerabilities and container image misconfiguration in production environments. Introduction The ClusterImageScanner detects images in a Kubernetes cluster and provides fast feedback based on various security tests. It is recommended to run the ClusterImageScanner in...

SecretScanner

SecretScanner SecretScanner Deepfence SecretScanner can find unprotected secrets in container images or file systems. SecretScanner is a standalone tool that retrieves and searches container and host filesystems, matching the contents against a database of approximately 140 secret types...

fuzzer-testing

fuzzer-testing Standardized Docker images for evaluating open-source fuzzers, fully integrated with the corpora for easy experimentation. Supported / Included Fuzzers AFL github.com/google/AFL AFLplusplus github.com/AFLplusplus Honggfuzz github.com/google/honggfuzzz QSYM sslab-gatech/qsym Eclipse...

detux

Detux: The Multiplatform Linux Sandbox Introduction: Detux is a sandbox developed to do traffic analysis of the Linux malwares and capture the IOCs by doing so. QEMU hypervisor is used to emulate Linux Debian for various CPU architectures. The following CPUs are currently supported: x86 x86-64 AR...

CVE-2026-100626

capgo through 12.128.2 contains an insecure direct object reference vulnerability in the PUT /app/:appId endpoint that accepts attacker-controlled icon storage paths. Authenticated users can supply arbitrary paths in the private images bucket and obtain service-role-signed URLs valid for 7 days t...

CVE-2026-100626 capgo through 12.128.2 IDOR via PUT /app icon endpoint

capgo through 12.128.2 contains an insecure direct object reference vulnerability in the PUT /app/:appId endpoint that accepts attacker-controlled icon storage paths. Authenticated users can supply arbitrary paths in the private images bucket and obtain service-role-signed URLs valid for 7 days t...

EUVD-2026-87770

capgo through 12.128.2 contains an insecure direct object reference vulnerability in the PUT /app/:appId endpoint that accepts attacker-controlled icon storage paths. Authenticated users can supply arbitrary paths in the private images bucket and obtain service-role-signed URLs valid for 7 days t...

EUVD-2026-87677

Kyverno is a policy engine for Kubernetes. In versions 1.14.0 through 1.19.0, the ImageValidatingPolicy policies.kyverno.io/v1beta1 evaluator never reads the spec.images and spec.allowedValues fields of a PolicyException. Any PolicyException whose policyRefs and matchConditions match a resource...

deep-pwning

Deep-pwning is a lightweight framework for experimenting with machine learning models with the goal of evaluating their robustness against a motivated adversary. Note that deep-pwning in its current state is no where close to maturity or completion. It is meant to be experimented with, expanded...

IP-Biter

IP-Biter - Framework The Hacker-friendly Tracking Framework IP-Biter is an open source, easy to deploy, tracking framework that generate high configurables and uniques tracking images and links to embed in e-mails, sites or chat systems and visualize, in an hacker-friendly dashboard, high detaile...

divd-2021-00038--log4j-scanner

divd-2021-00038--log4j-scanner このスキャナーは、アーカイブを含むパスを再帰的にスキャンし、脆弱なlog4jバージョンと org/apache/logging/log4j/core/lookup/JndiLookup.class ファイルを検出します。 現在、許可リストでは悪用不可能なバージョン（この場合は log4j-core 2.17.0 と 2.12.3）が定義されています。 機能 アーカイブ内のアーカイブを再帰的にすべてスキャン 既知のlog4jライブラリ（SHA256ハッシュ）をスキャン JndiLookup.classファイルをスキャン 高速...

minimal

小型で強化されたコンテナイメージ、無料でMITライセンス。 ChainguardのapkoとWolfiパッケージを使用してソースからビルドされ、6時間ごとに再ビルドされます。 すべてのイメージはcosign署名され、SPDX SBOM証明書が同梱され、SLSA Level 3のビルド来歴を保持しています。アカウント不要で全てを検証できます。 🌐 minimalcontainers.comで全カタログを閲覧 → イメージカタログ · イメージの検証 · 全57イメージ · HN discussion...

unblob

unblob Accurate, fast, and easy-to-use extraction suite for binary blobs. unblob parses unknown binary blobs for 78+ archive, compression, and file-system formats , extracts their content recursively, and carves out unknown chunks. It is the perfect companion for extracting, analyzing, and revers...

cli

Snyk CLI 시작하기 Snyk CLI 소개 Snyk는 개발자 우선의 클라우드 네이티브 보안 도구로, 소프트웨어 개발 프로젝트의 보안 취약점을 스캔하고 모니터링합니다. Snyk는 여러 콘텐츠 유형에서 보안 문제를 스캔합니다: Snyk Open Source: 오픈소스 취약점을 찾아 자동으로 수정합니다 Snyk Code: 애플리케이션 코드의 취약점을 실시간으로 찾아 수정합니다 Snyk Container: 컨테이너 이미지 및 Kubernetes 애플리케이션의 취약점을 찾아 수정합니다 Snyk IaC: Terraform 및...