Melvin PETIT

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

prom/prometheus

grafana/grafana

The official Grafana docker container

Automatic builds of Terraform. See README for more use and info.

WPScan

Official build of the Open Policy Agent project.

Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable.

Nmap ("Network Mapper") Docker Image

Official Graylog Docker image (automated build)

OWASP dependency-check detects publicly disclosed vulnerabilities within project dependencies.

Use this container to install the kube-bench go application on your host.

Secrets management and machine identity for modern infrastructure.

metasploit-framework

Mobile Security Framework is all-in-one automated mobile application pentesting framework.

Haskell Dockerfile Linter

Gitleaks provides a way to find secrets in git repositories

TheHive: a Scalable, Open Source and Free Security Incident Response Platform

Container Native Runtime Security for Cloud Native Platforms

Trivy is an all-in-one, cloud native security scanner

SonarScanner CLI for SonarQube and SonarCloud

Official Kali Linux Docker image (weekly snapshot of kali-rolling)

Bleeding edge version of CALDERA

Infrastructure as code static analysis - Prevent cloud misconfigurations during build time

Official Parrot Security image pre-loaded with pentest tools

Openvas/gvmd 23.1 with postgresql 13

Official Docker images for Semgrep.

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites.

Nuclei is a fast tool for configurable targeted scanning based on templates.

Run the REMnux distro for malware analysis as a Docker image.