proof-of-concept running docker container from omero web

Last update: Jan 22, 2022

Overview

docker-from-omero-poc

proof-of-concept running docker container from omero web

How-to

Edit test_script.py so that the BaseClient is created pointing to the correct hostname
Build the Dockerfile in your server (I used docker build -t test-omero . from the repo directory)
If you built it using a different container name, edit it on omero_post_kvpair.py so that docker runs the correct container
Upload omero_post_kvpair.py as an OMERO script (omero script upload omero_post_kvpair.py --official)
Make sure your OMERO user can run docker (it might need to be added to the docker group on your Linux system)

Owner

Erick Martins Ratamero

GitHub Repository

Coerce authentication from Windows hosts via MS-FSRVP (Requires FS-VSS-AGENT service running on host)

VSSTrigger Coerce authentication from Windows hosts via MS-FSRVP (Requires FS-VS

6 Jul 24, 2022

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

About Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user Changed from sam-the-admin. Usage SAM THE ADMIN CVE-202

500 Jan 06, 2023

Anti Supercookie - Confusing the ISP & Escaping the Supercookie

Confusing the ISP & Escaping the Supercookie

2 Nov 22, 2022

LinOTP - the open source solution for two factor authentication

462 Jan 02, 2023

Find exposed API keys based on RegEx and get exploitation methods for some of keys that are found

dora Features Blazing fast as we are using ripgrep in backend Exploit/PoC steps for many of the API key, allowing to write a good report for bug bount

243 Dec 27, 2022

🏃 Python Solutions of All Problems in FHC 2021 (In Progress)

FacebookHackerCup-2021 Python solutions of Facebook Hacker Cup 2021. Solution begins with * means it will get TLE in the largest data set (total compu

14 Oct 15, 2022

CVE-2021-41773 Path Traversal for Apache 2.4.49

3 Oct 20, 2021

Proof of concept of CVE-2022-21907 Double Free in http.sys driver, triggering a kernel crash on IIS servers

CVE-2022-21907 - Double Free in http.sys driver Summary An unauthenticated attacker can send an HTTP request with an "Accept-Encoding" HTTP request he

71 Dec 22, 2022

A python based tool that executes various CVEs to gain root privileges as root on various MAC OS platforms.

MacPer A python based tool that executes various CVEs to gain root privileges as root on various MAC OS platforms. Not all of the exploits directly sp

20 Nov 30, 2022

IDA scripts for hypervisor (Hyper-v) analysis and reverse engineering automation

Re-Scripts IA32-VMX-Helper (IDA-Script) IA32-MSR-Decoder (IDA-Script) IA32 VMX Helper It's an IDA script (Updated IA32 MSR Decoder) which helps you to

16 Oct 08, 2022

A knockoff social-engineer toolkit

The Python SE Dopp Kit is a social engineering toolkit with many purposes. It contains 5 different modules designed to be of assistance in different s

48 Nov 26, 2022

A python script to turn Ubuntu Desktop in a one stop security platform. The InfoSec Fortress installs the packages,tools, and resources to make Ubuntu 20.04 capable of both offensive and defensive security work.

infosec-fortress A python script to turn Ubuntu Desktop into a strong DFIR/RE System with some teeth (Purple Team Ops)! This is intended to create a s

41 Dec 30, 2022

GRR Rapid Response: remote live forensics for incident response

GRR Rapid Response is an incident response framework focused on remote live forensics. Build Type Status Tests End-to-end Tests Windows Templates Linu

4.3k Jan 05, 2023

Orthrus is a macOS agent that uses Apple's MDM to backdoor a device using a malicious profile.

Orthrus is a macOS agent that uses Apple's MDM to backdoor a device using a malicious profile. It effectively runs its own MDM server and allows the operator to interface with it using Mythic.

37 Dec 06, 2022

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

CVE-2021-31166: HTTP Protocol Stack Remote Code Execution Vulnerability This is a proof of concept for CVE-2021-31166 ("HTTP Protocol Stack Remote Cod

820 Dec 18, 2022

Automatically fetch, measure, and merge subscription links on the network, use Github Action

Free Node Merge Introduction Modified from alanbobs999/TopFreeProxies It measures the speed of free nodes on the network and import the stable and hig

52 Jul 16, 2022

A python package with tools to read and postprocess the output of the channel DNS-solver (davecats/channel), as well as its associated postprocessing tools.

Python tools for davecats/channel A python package with tools to read and postprocess the output of the channel dns solver, as well as its associated

1 Dec 13, 2021

Delta Sharing: An Open Protocol for Secure Data Sharing

Delta Sharing: An Open Protocol for Secure Data Sharing Delta Sharing is an open protocol for secure real-time exchange of large datasets, which enabl

497 Jan 02, 2023

CVE-2021-40346 integer overflow enables http smuggling

CVE-2021-40346-POC CVE-2021-40346 integer overflow enables http smuggling Reference: https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021

34 Nov 15, 2022

Tenssens framework focused on gathering information from free tools or resources. The intention is to help people find free OSINT resources.

31 Oct 21, 2022

proof-of-concept running docker container from omero web

Related tags

Overview

docker-from-omero-poc

How-to

Owner

Erick Martins Ratamero

Coerce authentication from Windows hosts via MS-FSRVP (Requires FS-VSS-AGENT service running on host)

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

Anti Supercookie - Confusing the ISP & Escaping the Supercookie

LinOTP - the open source solution for two factor authentication

Find exposed API keys based on RegEx and get exploitation methods for some of keys that are found

🏃 Python Solutions of All Problems in FHC 2021 (In Progress)

CVE-2021-41773 Path Traversal for Apache 2.4.49

Proof of concept of CVE-2022-21907 Double Free in http.sys driver, triggering a kernel crash on IIS servers

A python based tool that executes various CVEs to gain root privileges as root on various MAC OS platforms.

IDA scripts for hypervisor (Hyper-v) analysis and reverse engineering automation

A knockoff social-engineer toolkit

A python script to turn Ubuntu Desktop in a one stop security platform. The InfoSec Fortress installs the packages,tools, and resources to make Ubuntu 20.04 capable of both offensive and defensive security work.

GRR Rapid Response: remote live forensics for incident response

Orthrus is a macOS agent that uses Apple's MDM to backdoor a device using a malicious profile.

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

Automatically fetch, measure, and merge subscription links on the network, use Github Action

A python package with tools to read and postprocess the output of the channel DNS-solver (davecats/channel), as well as its associated postprocessing tools.

Delta Sharing: An Open Protocol for Secure Data Sharing

CVE-2021-40346 integer overflow enables http smuggling

Tenssens framework focused on gathering information from free tools or resources. The intention is to help people find free OSINT resources.