15596 matches found
strelka
ååøē | ę攣 | ęåčÆ·ę± | é®é¢...
Docker-Runc-Exploit
Docker-Runc-Exploit Docker runc CVE-2019-5736 exploit Dockerfile. Credits : https://github.com/Frichetten/CVE-2019-5736-PoC.git...
CDK
CDK - Zero Dependency Container Penetration Toolkit English | ē®ä½äøę Legal Disclaimer Usage of CDK for attacking targets without prior mutual consent is illegal. CDK is for security testing purposes only. Overview CDK is an open-sourced container penetration toolkit, designed for offering stable...
harbor
Introducción del equipo El equipo de seguridad Chongqing Jiugongge se dedica a compartir herramientas de seguridad de código abierto. Sus lĆneas de investigación cubren mĆŗltiples Ć”reas como red team/blue team, seguridad web, seguridad móvil, desarrollo seguro, construcción de seguridad empresaria...
CVE-2018-16167
Installation and Execution Sequence 0. LogonTracer Installation Download the logontracer version 1.2.0, where a vulnerability was found, from dockerhub. root@kitploit: $docker pull jpcertcc/docker-logontracer:v1.2.0 1. LogonTracer Execution Launch it in a container with the following command...
cve_2019-5736-PoC
CVE-2019-5736 PoC This repository contains a C-based proof-of-concept exploit for CVE-2019-5736. This vulnerability allows a malicious Docker container to overwrite the host's runc binary and execute arbitrary commands on the host with root privileges ā fully compromising the host system. Inspire...
yolobox
root@kitploit: āāā āāā āāāāāāā āāā āāāāāāā āāāāāāā āāāāāāā āāā āāā āāāā āāāāāāāāāāāāāāāā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā āāāāāāā āāā āāāāāā āāā āāāāāāāāāāāāāā āāā āāāāāā āāāāā āāā āāāāāā āāā āāāāāāāāāāāāāā āāā āāāāāā āāā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā āāā āāā āāāāāāā āāāāāāāā...
log4j-docker-vaccine
Log4j Docker Vaccine A containerized way to run the log4j vaccine offered by Cyberreason https://github.com/Cybereason/Logout4Shell Make it go Clone this repo: root@kitploit: git clone https://github.com/jeffbryner/log4j-docker-vaccine.git Edit the containers.env file to hold an accurate private ...
cve-2016-8869
CVE-2016-8869 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2016-8869 Image author: https://github.com/Medicean/VulApps/tree/master/j/joomla/1...
cosign
cosign Signing OCI containers and other artifacts using Sigstore! Cosign aims to make signatures invisible infrastructure. Cosign supports: "Keyless signing" with the Sigstore public good Fulcio certificate authority and Rekor transparency log default Hardware and KMS signing Signing with a cosig...
CVE-2022-46463
CVE-2022-46463 CVE-2022-46463POC Harbor no autorizado Los detalles de la vulnerabilidad estĆ”n disponibles en Stackē¤¾åŗ Uso root@kitploit: python3 cvve-2022-46463.py -u https://127.0.0.1:5003 Opciones root@kitploit: -u URL, --url URL URL objetivo p. ej. http://example.com -h, --help Mostrar mensaje ...
docker_escape_pwn
Escape from Docker using CVE-2017-1000112 and CVE-2017-18344. Including: gaining root privilage get all capbilities namespace recovery filesystem recovery cgroup limitation bypass seccomp bypass...
security-labs-pocs
Datadog Security Labs Research and Proof of Concept Code This repository contains information, exploits, malware samples, and scripts from Datadog Security Labs. Goal This repository aims at providing proof of concept exploits, malware samples and technical demos to help the community respond to...
CVE-2024-21626-old-docker-versions
Container escape vulnerability in old runc components CVE-2024-21626 During my analysis about CVE-2024-21626 I found that other older docker components are vulnerable about fd leakage that is not mentioned in the security advisory GHSA-xr7r-f8xq-vfvv. Read my full article for detailed explanation...
CVE-2022-0185
CVE-2022-0185 linux å ę øęęééø toc ę¼ę“ē®ä» ę¼ę“ē¼å·: CVE-2022-0185 ę¼ę“čÆå: ę¼ę“äŗ§å: linux kernel - fsconfig syscall å½±åčå“: linux kernel 5.1-rc1 5.16.2 å©ēØę”ä»¶: linux ę¬å°; å ·ęCAPSYSADMIN capęéåÆä»„unshare ē“ę„č·å¾ļ¼ēäŗę éå¶ å©ēØęę: ę¬å°ęęļ¼å®¹åØééø ęŗē č·å: git clone git://kernel.ubuntu.com/ubuntu/ubuntu-focal.git -b...
cve-2018-3810
CVE-2018-3810 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-3810 Image author: https://github.com/cved-sources/cve-2018-3810...
CVE-2026-17106
CVE-2026-17106 ā CopyEscape:docker cp container-to-host arbitrary file write HackSpeak distribution mirror. This repository is a distribution mirror of the CopyEscape PoC CVE-2026-17106 published by the Imperva Red Team Ron Masas , with the code identical to upstream; upstream does not include a...
wrongsecrets
OWASP WrongSecrets !Docker container testhttps://github.com/OWASP/wrongsecrets/actions/workflow...
subfinder
Fast passive subdomain enumeration tool. Features ⢠Install ⢠Usage ⢠API Setup ⢠Library ⢠Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...
Learn-about-cve-2025-31133-poc
Learn-about-cve-2025-31133-poc Overview A proof-of-concept demonstration and learning environment for CVE-2025-31133 , a security vulnerability in runc that allows bypassing maskedPaths protection through a race condition. maskedPaths are designed to prevent containers from accessing sensitive ho...