cve-2018-9207

CVE-2018-9207 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-9207 Image author: https://github.com/lcashdol/Exploits/tree/master/CVE-2018-9207...

CVE-2024-21626-POC

CVE-2024-21626-PoC Usage Instructions For educational/research purposes only. Any use unrelated to education/research is at your own risk. Usage root@kitploit: docker build . -t cve-2024-21626 docker run -it --rm cve-2024-21626 bash /poc.sh 另起一个terminal /bin/bash.copy Note The specific file...

vesta

A static analysis of vulnerabilities, Docker and Kubernetes cluster configuration detect toolkit based on the real penetration of cloud computing. English · 简体中文 Overview Vesta is a static analysis of vulnerabilities, Docker and Kubernetes cluster configuration detect toolkit. It inspects...

hardening-k8s-containers

Intentionally Vulnerable Note Taking Application This repository contains a very simple and vulnerable application used to demonstrate the differences between deploying this application with the default settings to a Kubernetes cluster, versus adding some extra security settings that WILL NOT fix...

CVE-2026-87055

A flaw was found in operator-sdk-builder. The software uses a flexible label, called a mutable tag, to identify its base container image instead of a unique, fixed identifier. This practice allows the underlying base image to change unexpectedly between builds. Such a change could introduce...

osint_toolkit

OSINT Toolkit Warning OSINT Toolkit is not production ready yet. This is an early prototype, that still needs some work to be done. A fullstack web application built for security analysts OSINT Toolkit is a self-hostable, on-demand analysis platform designed for security specialists. It...

cve-2014-6271

CVE-2014-6271 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2014-6271 Image author: https://github.com/Medicean/VulApps/tree/master/b/bash/shellshock1CVE-2014-6271...

cve-2019-9194

CVE-2019-9194 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2019-9194 Image author: https://github.com/cved-sources/cve-2019-9194...

csf

ArmourBird CSF - Container Security Framework Note: The CSF Client is under active development and is getting converted into GoLang for better performace and architecture Table of Contents 1. About 2. Architecture Diagram 3. APIs-CSF Server 4. Installation/Usage 5. Building Docker Images 6. Sneak...

csf

ArmourBird CSF - 容器安全框架 注意： CSF 客户端正在积极开发中，并正在转换为 GoLang 以获得更好的性能和架构。 目录 1. 关于 2. 架构图 3. API - CSF 服务器 4. 安装/使用 5. 构建 Docker 镜像 6. 预览 7. 待办事项 8. 网站 9. Twitter 10. 参考资料 关于 ArmourBird CSF - 容器安全框架 是一个可扩展、模块化、API 优先的框架，用于对 Docker 安装和容器进行定期的安全监控，支持 CIS 及其他自定义安全检查。 ArmourBird CSF 采用客户端-服务器架构，因此分为两个组件：...

cve-2017-7494

CVE-2017-7494 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2017-7494 Image author: https://github.com/opsxcq/exploit-CVE-2017-7494...

CVE-2026-87054

A flaw was found in operator-sdk-builder. The containers-policy.json configuration file defaults to insecureAcceptAnything for container image registries that are not explicitly listed. This default setting causes signature verification to be entirely skipped for images pulled from these unlisted...

CVE-2026-87053

A flaw was found in operator-sdk-builder. Due to an oversight in the Containerfile configuration, the final built container image runs with root privileges by default. This increases the attack surface of the container, as any process executed within it will have elevated permissions. If a...

agentbox

Agentbox - Coding Agent Sandbox There's no perfect way to sandbox agents yet, but containers are a practical start. Agentbox is a Docker-based coding agent sandbox, originally inspired by Batrachian Toad, and now generalized to more tools. It provides an isolated environment that works well with...

cve-2017-12615

CVE-2017-12615 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2017-12615 Image author: https://github.com/Medicean/VulApps/tree/master/t/tomcat/1...

SecretScanner

SecretScanner SecretScanner Deepfence SecretScanner can find unprotected secrets in container images or file systems. SecretScanner is a standalone tool that retrieves and searches container and host filesystems, matching the contents against a database of approximately 140 secret types...

docker-bench-security

Docker 安全基准 Docker 安全基准是一个脚本，用于检查在生产环境中部署 Docker 容器时数十种常见最佳实践。测试全部自动化，并基于 CIS Docker 基准 v1.6.0。 我们将其作为开源工具提供，以便 Docker 社区能够轻松地根据该基准对主机和 Docker 容器进行自我评估。 版本| CIS 基准版本 ---|--- 1.6.0| 1.6.0 1.5.0| 1.5.0 1.3.6| 1.4.0 1.3.5| 1.2.0 1.3.3| 1.1.0 1.3.0| 1.13.0 运行 Docker 安全基准 从你的基础主机运行 你可以直接从基础主机运行此脚本：...

kubolt

Wat? Kubolt is simple utility for scanning public unauthinticated kubernetes clusters and run commands inside containers Why? Sometimes, the kubelet port 10250 is open to unauthorized access and makes it possible to run commands inside the containers using getrun function from kubelet:...

terrier

Terrier Terrier is a Image and Container analysis tool that can be used to scan OCI images and Containers to identify and verify the presence of specific files according to their hashes. A detailed writeup of Terrier can be found on the Heroku blog,...

terrier

Terrier Terrier 是一款镜像和容器分析工具，可用于扫描 OCI 镜像和容器，根据其哈希值识别并验证特定文件的存在。关于 Terrier 的详细说明可参见 Heroku 博客：https://blog.heroku.com/terrier-open-source-identifying-analyzing-containers。 安装 二进制文件 如需通过二进制文件安装，请访问 发布页面。 通过 Go 安装 root@kitploit: $ go get github.com/heroku/terrier 从源码构建 通过 Go root@kitploit: $ go bui...