dockerbucket

Spring cloud vulnerability aka Spring4shell POC

SpEL expression injection vulnerability (CVE-2022-22963)

A simple app constructed using golang, vulnerable to LDAP Injection

SSRF and Insecure Deserialization based CTF applcaition

A simple PhP Server for performing CSRF related test along with Flash

Flask App vulnerable to Insecure Deserialization

Flask server running on HTTPS [Self Signed Certificate] that can act as a HTTPS Listener

App vulnerable to Server Side Template Injection built inside Ubuntu Image