docker-lab

Docker在线实验室

CVE proof-of-concept labs, exploit scripts, and detection/prevention rules (Nginx, Apache, Snort, YARA) for high-severity CVEs. Authorized security testing & research only.

Authorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix.

Dockerized osTicket helpdesk environment with practice ticket workflows and admin access.

Automated vulnerable machine deployer for penetration testing training and CTF challenges. Deploys Docker containers with multiple configurable attack surfaces over SSH, managed through a web UI with real-time feedback.

Comprehensive containerized security lab with 158+ vulnerable services (OWASP, CVEs, Databases, DevOps). Features an isolated network, unified orchestration, and a production-grade automated OpenVAS/GVM scanning framework.

CVE-2026-103849 (BlockStrap) reproduction lab: unauthenticated {{block}} injection on Magento 2.4.9 via guest GraphQL, A/B vs APSB26-153; command execution only through a labeled synthetic gadget, not stock classes.

Penetration testing and network diagnostics learning lab with 17 tools, task-focused scripts, and Docker-based vulnerable targets

Docker lab for practice

This is a collection of tutorials for learning how to use Docker with various tools. Contributions welcome.

Free hands-on AI red teaming lab. Docker challenges for prompt injection, filter bypass, RAG poisoning and agent tool abuse. Runs locally on Ollama — no cloud API keys.

PHP session upload-progress LFI lab and FPM OOM / rfc1867 memory-corruption reproduction (CVE-2026-109618, CVE-2026-109619)

PoC and Docker lab for CVE-2026-104623 — SUSE Rancher Manager local-cluster-shell authorization bypass: any authenticated user spawns a shell pod on the management cluster via alternate request forms that dodge the authorization gate. Validated end-to-end on rancher 2.15.2 (vulnerable) vs 2.15.3 (patched).

Docker Labs.

OWASP A04 / CWE-434 Unrestricted File Upload Vulnerability Lab

An offline, Dockerized web app for teaching reflected XSS → cookie theft → account takeover, with three difficulty levels (Low / Medium / High).

Docker basics lab with Docker Compose: learn docker ps, logs, exec and restart by fixing a broken service. Runs in the browser on the MitsuruTech Learning Platform.

Pikachu enhanced Web security lab with JWT, CORS, Clickjacking, Session Fixation, Host Header and Docker Lab.

Docker Auto Grading for Students Assignments and Exam Submissions

PoC for CVE-2026-116366 — ClickHouse Server unauthenticated RCE (brotli v1.2.0 decoder out-of-bounds write): differential detector, weaponized DoS, containerized vulnerable-vs-fixed lab, root-cause analysis