botb

Break out the Box BOtB BOtB — это инструмент для анализа и эксплуатации контейнеров, предназначенный для пентестеров и инженеров, а также совместимый с CI/CD, работающий с распространёнными технологиями CI/CD. Что он делает? BOtB — это CLI-инструмент, который позволяет: Эксплуатировать...

security-labs-pocs

Исследования Datadog Security Labs и код Proof of Concept Этот репозиторий содержит информацию, эксплойты, образцы вредоносных программ и скрипты от Datadog Security Labs. Цель Этот репозиторий предназначен для предоставления PoC-эксплойтов, образцов вредоносных программ и технических демонстраци...

Docker-Escape-Miner

Utilisation d'un exploit Docker publié pour obtenir un accès root et exécuter un script de minage bitcoin Ceci utilise deux bibliothèques open source : nightminer par @ricmoo pour le minage bitcoin en python RunC-CVE-2019-5736 par @twistlock pour l'évasion Docker Configuration système requise Cel...

CVE-2022-0847-DirtyPipe-Container-Breakout

DirtyPipe: PoC выхода из контейнера Этот репозиторий содержит PoC для уязвимости ядра dirtypipe, предназначенный для выхода из контейнера. Дальнейшие объяснения можно найти в этой записи блога...

CVE-2024-21626

Utilisation: 1. git clone https://github.com/cdxiaodong/CVE-2024-21626 2. docker-compose up Vérification : si l'on obtient le fichier /etc/passwd de l'hôte, la vulnérabilité est présente. Environnement : runc: =v1.0.0-rc93,=1.1.11 Détails du principe d'attaque : Dans les versions affectées de run...

botb

Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...

CVE-2019-14271_Exploit

CVE-2019-14271Exploit 환경을 구축하고 익스플로잇하기 위한 편리하고 시간을 절약해 주는 자동 스크립트입니다. 참고 자료 https://github.com/Metarget/metarget https://github.com/Metarget/metarget/tree/master/writeupscnv/docker-cve-2019-14271 https://github.com/thomasyang1207/Exploits/tree/master/CVE201914271 사용법 root@kitploit: chmod 777...

CVE-2024-21626

CVE-2024-21626 익스플로잇 작업 디렉토리 docker run -w /proc/self/fd/8 --name cve-2024-21626 --rm -it debian:bookworm 중요한 것은 -w /proc/self/fd/8를 넣는 것입니다.\ 컨테이너 내부에서 cat ../../../../../../../../../etc/passwd를 사용하여 호스트 파일시스템에 접근합니다. 익스플로잇 심볼릭 링크 1. docker run --name cve-2024-21626 --rm --it debian:bootworm 2...

ehir-vuln-enterprise-login

Configuration locale du portail d'entreprise Ce projet contient une configuration localisée en conteneurs comprenant un portail frontend et une passerelle backend intégrée. Structure de l'espace de travail client/ : Contient les fichiers statiques du frontend index.html utilisant Bootstrap 5 et l...

CVE-2025-9074-PoC

Docker API RCE non authentifié CVE-2025-9074 Une vulnérabilité critique CVE-2025-9074 dans Docker Desktop permet aux conteneurs Linux s'exécutant localement de se connecter à l'API Docker Engine via le sous-réseau par défaut 192.168.65.7:2375. Le problème persiste indépendamment de l'isolation...

CVE-2026-21754

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakout, and sensitive data exposure within internal communications...

CVE-2026-21754

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities that could enable unauthorized lateral movement , container breakout , and sensitive data exposure within internal communications. The CVSS 3.1 base score is 5.4 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R...

CVE-2026-21754 HCL Hive is affected by multiple security vulnerabilities.

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakout, and sensitive data exposure within internal communications...

EUVD-2026-65469

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakout, and sensitive data exposure within internal communications...

CVE-2025-68825

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications...

CVE-2025-68825 HCL Hive is affected by incorrect default permissions

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications...

CVE-2025-68825

HCL Hive is affected by incorrect default permissions that can be exploited over the network without prior authentication (CVSS 7.5, HIGH). The vulnerability enables unauthorized lateral movement , container breakout , and interception of sensitive internal communications , with the primary impac...

EUVD-2025-210763

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications...

PT-2026-80900

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications...

CVE-2026-50540 affecting package kata-containers for versions less than 3.32.0.kata0-3

CVE-2026-50540 affecting package kata-containers for versions less than 3.32.0.kata0-3. A patched version of the package is available...