Tools

mailcow/mailcow-dockerized

Dockerized mail server suite with Postfix, Dovecot, Rspamd, and ClamAV. Provides secure email hosting with integrated spam filtering, antivirus, and…

blessedrebus/krawl

Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging…

cyberark/kubesploit

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

twistlock/whoc

A container image that exfiltrates the underlying container runtime to a remote server

capsulerun/vpod

Lightweight, secure Linux sandboxes for untrusted processes. Runs in the browser and on the server.

gensecaihq/react2shell-scanner

Security scanner for CVE-2025-55182 - Critical RCE vulnerability in React Server Components. Scan npm/pnpm/yarn lockfiles, Docker images, SBOMs,…

wantasticapp/wantasticcore

AIO Cloud Managment Server

berraesen/apache-cve-2021-42013-lab

Docker ortamında Apache HTTP Server 2.4.49 (CVE-2021-42013) zafiyetinin gösterildiği laboratuvar çalışması.

joaoreis13/flight-risk

Security toolkit for CVE-2025-55182 (React2Shell) — scan, detect, correlate, and test React Server Components RCE vulnerability

abcfabian/react2shell-cve-2025-55182-testing-environment

A containerized testing environment for CVE-2025-55182, a critical (10.0 CVSS) Remote Code Execution vulnerability in React Server Components.

jas9reet/cve-2021-42013-lab

Apache HTTP Server 2.4.50 - RCE Lab

excellencedev/cve-2018-19629

Hyland Perceptive Content Server - Denial of Service

juanorts/crushftp10-docker-cve-2024-4040

A Dockerized setup for running a vulnerable CrushFTP 10 server instance (CVE-2024-4040).

meganekos/secure-by-default-rce-demo

Secure-by-default demo lab showing how container hardening (distroless images, non-root, read-only filesystem, runtime-injected secrets) can…

12345qwert123456/cve-2021-42013

Vulnerable configuration Apache HTTP Server version 2.4.49/2.4.50

12345qwert123456/cve-2021-41773

Vulnerable configuration Apache HTTP Server version 2.4.49

danthegoodman1/netfence

Like Envoy xDS, but for eBPF filters

authrequest/freeloader

Plex Unlocker