rootpacket-cve-2026-31431

rootpacket CVE-2026-31431 A Linux Docker-to-host cryptojacking toolkit captured from live attacks on Kinryū Labs honeypots. It breaks in through an exposed Docker Engine API, escapes the container to root the host with CVE-2026-31431 , installs a kernel rootkit, and runs an XMRig Monero miner. Fu...

Copy-Fail-CVE-2026-31431-Kubernetes-PoC

Copy Fail CVE-2026-31431 — Kubernetes Container Escape PoC A proof-of-concept demonstrating how a fully unprivileged container can achieve node-level code execution on Kubernetes by exploiting the CVE-2026-31431 Linux kernel page-cache corruption bug through shared container image layers. The cor...

page_inject

pageinject - AFALG aead cross-container escape AFALG aead vulnerability cross-container exploit -- pivot from one compromised container into every sibling container that shares the samelibc.so.6 image layer. This is an escape primitive : it runs from inside an unprivileged container that the...

cve_2019-5736-PoC

CVE-2019-5736 PoC This repository contains a C-based proof-of-concept exploit for CVE-2019-5736. This vulnerability allows a malicious Docker container to overwrite the host's runc binary and execute arbitrary commands on the host with root privileges – fully compromising the host system. Inspire...

vulnerable-container-hub

The OWASP Vulnerable Container Hub Project Background There are many repositories out there to provide vulnerable environments such as web applications, containers or virtual machines to those who want to learn security, since it helps not only students or someone who recently joined the field to...

CVE-2022-0847-Container-Escape

CVE-2022-0847 CVE-2022-0847 used to achieve container escape overwrite any read-only files on host Slides in Chinese available here 利用CVE-2022-0847 Dirty Pipe 实现容器逃逸（效果为覆写宿主机上任意只读文件） 中文汇报PPT在这里 Introduction If the kernel is vulnerable to CVE-2022-0847, the attacker can overwrite read-only files...

CVE-2022-0492

CVE-2022-0492 Container Escape Analysis toc Vulnerability Overview Vulnerability ID: CVE-2022-0492 Vulnerable Product: linux kernel - cgroup Affected Versions: linux kernel 5.17-rc3 Vulnerability Impact: When a container does not have additional security measures enabled, an attacker with root...

CVE-2025-9074

CVE-2025-9074 – Full Docker Escape on Windows & macOS Docker Desktop 📌 Description Docker Desktop exposes the internal Docker Engine API at http://192.168.65.7:2375 to any running container — with no authentication and no access control. Because the engine itself can mount the host filesystem, a...

Learn-about-cve-2025-31133-poc

Learn-about-cve-2025-31133-poc Overview A proof-of-concept demonstration and learning environment for CVE-2025-31133 , a security vulnerability in runc that allows bypassing maskedPaths protection through a race condition. maskedPaths are designed to prevent containers from accessing sensitive ho...

Docker-breakout-runc

Docker breakout via runc Originally from : https://github.com/Frichetten/CVE-2019-5736-PoC. This repo is simply me messing around with the PoC and attempting to figure the exploit's flow...

CVE-2025-9074-Docker-Exploit

Herramienta de ejecución de comandos en contenedores Docker CVE-2025-9074 Una potente herramienta de explotación de vulnerabilidades de la API remota de Docker, para la investigación y prueba de seguridad de la vulnerabilidad CVE-2025-9074. Ventajas principales ✅ Gestión totalmente automatizada d...

docker_escape_pwn

Escape from Docker using CVE-2017-1000112 and CVE-2017-18344. Including: gaining root privilage get all capbilities namespace recovery filesystem recovery cgroup limitation bypass seccomp bypass...

CVE-2022-0185

CVE-2022-0185 Linux Kernel Privilege Escalation Escape toc Vulnerability Overview Vulnerability ID: CVE-2022-0185 CVSS Score: Affected Product: linux kernel - fsconfig syscall Affected Versions: linux kernel 5.1-rc1 5.16.2 Exploitation Requirements: Linux local; requires CAPSYSADMIN capability ca...

cve-2024-21626

CVE-2024-21626 概要 このリポジトリには、CVE-2024-21626に対して脆弱なアプリのコード例と、悪用試行を検出するためのeBPFガジェットが含まれています。 このリポジトリは、このブログ記事の一部として作成されました。 この脆弱性の検出に使用されるガジェットプログラムは、デモンストレーション目的のみです。これはCVE-2024-21626の完全な検出ではありません。 脆弱性の説明...

CVE-2024-21626

CVE-2024-21626 POC Requirements runc 1.1.0 = 1.1.11 Installation of vulnerable environment Deploy a VM with Ubuntu 20.04 and download Docker by following their guide root@kitploit: https://docs.docker.com/engine/install/ubuntu/ Change the patched 'runc' version in Docker to a vulnerable one...

vulhub

Vulhub is an open-source collection of pre-built, ready-to-use vulnerable Docker environments. With just one command you can launch a vulnerable environment for security research, learning, or demonstration, no prior Docker experience required. 中文版本Chinese version Quick Start Install Docker examp...

CVE-2026-31431-Copy-Fail

CVE-2026-31431 — “Copy Fail”：Linux 内核 algifaead 本地权限提升 CISA KEV | CVSS 7.8 高危 | 影响 Linux 内核 4.14 – 2026 年初（约 9 年） 目录 1. 执行摘要 2. 风险评估 3. 技术深度剖析 4. 攻击方法 — 红队 5. 检测与应急响应 — 蓝队 6. 补丁与修复 7. 实验环境 8. 参考资料 1. 执行摘要 CVE-2026-31431 ，绰号 “Copy Fail” ，是 Linux 内核加密子系统中的一个高危本地权限提升（LPE）漏洞。低权限本地用户可在任何未打补丁的系统上数秒内提升至...

CVE-2026-31431-Container-Escape

CVE-2026-31431 Container Escape 通过 runC 实现容器逃逸...

copy-fail-CVE-2026-31431

CVE-2026-31431 Copy Fail 漏洞利用 作者：pyroceper 测试环境：Ubuntu 25.10 x8664 root@kitploit: $ make $ ./exploit 检测到内核：6.17.0 正在将 /etc/passwd 备份到 /tmp 备份已保存为 /tmp/passwd.bak 正在获取 root shell... id uid=0pwn gid=0root groups=0root whoami pwn 致谢与参考： 原始漏洞发现：Taeyang Lee 和 Xint Code 研究团队 Python 实现：theori-io...

CVE-2026-31431

CVE-2026-31431 — Copy Fail 732 字节，通杀主流 Linux 发行版，直达 root CVE-2026-31431（Copy Fail）是 Linux 内核 authencesn 加密模板中的一个逻辑漏洞。它允许非特权本地用户对系统上任意可读文件的页缓存（page cache）进行确定性的、可控的 4 字节写入。 概述 CVE 编号: CVE-2026-31431 类型: 本地提权 / 容器逃逸 影响范围: 启用 CONFIGCRYPTOAUTHENC 的 Linux 内核（2017 年以来几乎所有主流发行版） 发现者: Xint Code 研究团队，Theo...