Exposing /var/run/docker.sock could lead to full environment takeover.

An app with really insecure crypto. To be used to see/test/exploit weak cryptographic implementations as well as to learn a little bit more about crypto, without the need to dive deep into the math...

Demos for several kubernetes security features. Contribute to cloudogu/k8s-security-demos development by creating an account on GitHub.

Some demo scripts for education purposes. Contribute to whitespots/security-for-developers development by creating an account on GitHub.

Over the years, FINN.no has been doing a lot of different security assessments: from the classical one test per release to regular on-site…

NAT Slipstreaming allows an attacker to remotely access any TCP/UDP services bound to a victim machine, bypassing the victim’s NAT/firewall, just by anyone on the victim's network visiting ...

Docker image to exploit RCE, try for pentest methods and test container security solutions (trivy, falco and etc.) - GitHub - Swordfish-Security/Pentest-In-Docker: Docker image to exploit RCE, try...

Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.