security-labs-pocs

Datadog Security Labs 연구 및 PoCProof of Concept 코드 이 저장소에는 Datadog Security Labs의 정보, 익스플로잇, 악성코드 샘플, 스크립트가 포함되어 있습니다. 목표 이 저장소는 커뮤니티가 위협에 대응할 수 있도록 PoC 익스플로잇, 악성코드 샘플 및 기술 데모를 제공하는 것을 목표로 합니다. 이 저장소의 코드는 다음과 같은 용도로 사용될 수 있습니다: 탐지 규칙 개선 전술, 기법, 절차TTP에 대한 추가 연구 지속 추가 익스플로잇 발견 PoCProof of Concept...

CVE-2024-21626

Эксплуатация: 1.git clone https://github.com/cdxiaodong/CVE-2024-21626 2.docker-compose up Проверка: если получен /etc/passwd хоста, значит уязвимость присутствует. Окружение: runc: =v1.0.0-rc93,=1.1.11 Принцип и детали атаки: В затронутых версиях runc во время инициализации происходит утечка...

CVE-2019-14271_Exploit

CVE-2019-14271Эксплойт Удобный и экономящий время автоскрипт для построения окружения и его эксплуатации. Ссылки https://github.com/Metarget/metarget https://github.com/Metarget/metarget/tree/master/writeupscnv/docker-cve-2019-14271...

CVE-2024-21626

CVE-2024-21626 익스플로잇 작업 디렉토리 docker run -w /proc/self/fd/8 --name cve-2024-21626 --rm -it debian:bookworm 중요한 것은 -w /proc/self/fd/8를 넣는 것입니다.\ 컨테이너 내부에서 cat ../../../../../../../../../etc/passwd를 사용하여 호스트 파일시스템에 접근합니다. 익스플로잇 심볼릭 링크 1. docker run --name cve-2024-21626 --rm --it debian:bootworm 2...

botb

Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...

botb

Break out the Box BOtB BOtB — это инструмент для анализа и эксплуатации контейнеров, предназначенный для пентестеров и инженеров, а также совместимый с CI/CD, работающий с распространёнными технологиями CI/CD. Что он делает? BOtB — это CLI-инструмент, который позволяет: Эксплуатировать...

Docker-Escape-Miner

공개된 Docker 취약점을 이용하여 루트 권한 획득 및 비트코인 마이닝 스크립트 실행 이 도구는 두 개의 오픈 소스 라이브러리를 사용합니다: nightminer @ricmoo 제작 - 파이썬 비트코인 마이닝용 RunC-CVE-2019-5736 @twistlock 제작 - 도커 이스케이프용 시스템 요구사항 Kali Linux, Docker 버전 18.03.0 및 RunC 버전 1.0.0-rc5에서 테스트되었습니다. 실행 방법 1. 리포지토리를 클론하고 해당 디렉토리로 이동하세요. 2. ./setup을 실행하세요. 3...

CVE-2022-0847-DirtyPipe-Container-Breakout

DirtyPipe: PoC выхода из контейнера Этот репозиторий содержит PoC для уязвимости ядра dirtypipe, предназначенный для выхода из контейнера. Дальнейшие объяснения можно найти в этой записи блога...

ehir-vuln-enterprise-login

엔터프라이즈 기업 포털 로컬 설정 이 프로젝트는 프런트엔드 포털과 통합 백엔드 게이트웨이를 갖춘 로컬 컨테이너 기반 설정을 포함합니다. 작업공간 구조 client/: Bootstrap 5와 API 연결 처리기를 사용하는 정적 프런트엔드 파일index.html을 포함합니다. docker-compose.yml: 로컬 다중 컨테이너 오케스트레이션 파일입니다. 사용 지침 1. 스택 빌드 및 실행 백그라운드분리 모드에서 서비스를 시작하려면: root@kitploit: docker-compose up -d 2. 활성 서비스 및 상태 확인...

CVE-2025-9074-PoC

Docker API: Неавторизованный RCE CVE-2025-9074 Критическая уязвимость CVE-2025-9074 в Docker Desktop позволяет локально запущенным Linux-контейнерам подключаться к API Docker Engine через подсеть по умолчанию 192.168.65.7:2375. Проблема сохраняется независимо от настроек Enhanced Container...

CVE-2026-21754

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakout, and sensitive data exposure within internal communications...

CVE-2026-21754

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities that could enable unauthorized lateral movement , container breakout , and sensitive data exposure within internal communications. The CVSS 3.1 base score is 5.4 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R...

CVE-2026-21754 HCL Hive is affected by multiple security vulnerabilities.

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakout, and sensitive data exposure within internal communications...

EUVD-2026-65469

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakout, and sensitive data exposure within internal communications...

CVE-2025-68825

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications...

CVE-2025-68825 HCL Hive is affected by incorrect default permissions

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications...

EUVD-2025-210763

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications...

CVE-2025-68825

HCL Hive is affected by incorrect default permissions that can be exploited over the network without prior authentication (CVSS 7.5, HIGH). The vulnerability enables unauthorized lateral movement , container breakout , and interception of sensitive internal communications , with the primary impac...

Astra Linux – Vulnerability in runc-app

Runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.0.0-rc3 through 1.2.7, 1.3.0-rc.1 through 1.3.2, and 1.4.0-rc.1 through 1.4.0-rc.2, an attacker can trick runc into binding paths that are normally read-only or masked, allowing them to be...

PT-2026-80900

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications...