CVE-2026-81904

Concrete CMS below 9.5.3 is affected by a missing authorization flaw in the asset registration for sub-blocks within a Stack , Container , or layout area. The system registered view assets for every sub-block without verifying whether the requesting user had permission to view that sub-block, all...

mitm-router

☠ 中间人路由器 🌐 将任何 Linux 计算机变成一个公共 Wi-Fi 网络，默默地对所有 HTTP 流量实施中间人攻击。它在 Docker 容器内运行，使用 hostapd、dnsmasq 和 mitmproxy 创建一个名为 "Public" 的开放蜜罐无线网络。为了增加趣味性，将网络名称改为 "xfinitywifi"，可以自动连接任何曾经连接过这些网络的人……它们无处不在。 免责声明：本软件仅供教育目的。不得用于非法活动。作者不对其使用负责。不要做混蛋。 root@kitploit: 克隆仓库 git clone...

cve-2018-16509

CVE-2018-16509 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-16509 Image author: https://github.com/knqyf263/CVE-2018-16509...

cve-2019-5736-poc

To run: 1. edit poc command in stage2.c 2. build docker docker build -t cve . 3. run docker docker run -d cve /bin/bash -c "tail -f /dev/null" 4. backup docker-runc cp /usr/bin/docker-runc /usr/bin/docker-runc.bak 5. docker exec -it docker-id /bin/bash 6. in docker run cd /root && ./run.sh && exi...

cve-2024-3094

How to detect the CVE-2024-3094 I'll walk through the step-by-step process of detecting CVE-2024-3094, commonly known as the XZ Backdoor, in containers using Trend Micro's Vision One TMAS CLI. This vulnerability presents significant risks to containerized environments, and with the right tools an...

attack-stix-data

ATT&CK® STIX Data MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and ...

syft

Syft Una herramienta CLI y una biblioteca de Go para generar una Lista de Materiales de Software SBOM a partir de imágenes de contenedores y sistemas de archivos. Excepcional para la detección de vulnerabilidades cuando se usa con un escáner comoGrype...

docker-cve-2021-41773

CVE-2021-41773 A Demonstration to show the CVE-2021-41773 vulnerability on a docker container. Usage Server run build.shruns docker build root@kitploit: ./scripts/build.sh NOTE: No need to do it more than once run deploy.sh creates a docker container with the image from build.sh root@kitploit:...

cve-2018-19207

CVE-2018-19207 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-19207 Image author: https://github.com/cved-sources/cve-2018-19207...

CVE-2022-0492-Docker-Breakout-Checker-and-PoC

CVE-2022-0492 Docker Breakout Checker and PoC Summary Exploiting the vulnerability requires the attacker to have access to a Docker container running on a vulnerable system. Once exploited, the attacker can escape the container and gain complete control over the host system. A vulnerability was...

ShadowClone

ShadowClone ShadowClone allows you to distribute your long running tasks dynamically across thousands of serverless functions and gives you the results within seconds where it would have taken hours to complete. You can make full use of the Free Tiers provided by cloud providers and supercharge...

linnix

Linnix Find which process is hurting your SLOs — not just who's using CPU, but who's causing stalls. The Problem top shows 80% CPU. Prometheus shows high latency. But which pod is actually stalling your payment service? Linnix uses eBPF + PSI Pressure Stall Information to answer this. PSI measure...

CVE-2024-0132

CVE-2024-0132 CVE-2024-0132 PoC Let's start by deciding on a base image. The arrangement of libraries in the system depends on what it will be. For example, for alpine it will be /usr/lib64/, for ubuntu it will be /usr/lib/x8664-linux-gnu. We will use ubuntu as a base image. root@kitploit: FROM...

vex8s

Vex8s this logo is not AI generated Vex8s generates VEX documents by correlating container vulnerabilities with Kubernetes settings to determine which CVEs are actually exploitable in your cluster. Please note, this is an experimental project. Things might change quickly. How It Works The project...

grype

Grype 一款用于容器镜像和文件系统的漏洞扫描器。 特性 扫描容器镜像 、文件系统 和SBOM 以发现已知漏洞（查看文档了解完整的支持的扫描目标列表） 支持主流操作系统软件包生态系统（Alpine、Debian、Ubuntu、RHEL、Oracle Linux、Amazon Linux 以及更多） 支持特定语言的软件包（Ruby、Java、JavaScript、Python、.NET、Go、PHP、Rust 以及更多） 支持 Docker、OCI 和 Singularity 镜像格式 通过 EPSS 、KEV 和 风险评分 进行威胁与风险优先级排序（参见解读结果文档） OpenVEX...

grype

Grype A vulnerability scanner for container images and filesystems...

minimal

Small, hardened container images, free and MIT-licensed. Built from source with Chainguard's apko and Wolfi packages, rebuilt every six hours. Every image is cosign-signed, ships an SPDX SBOM attestation, and carries SLSA Level 3 build provenance. You can verify all of it without an account. 🌐...

ptcpdump

ptcpdump %20e2e %20e2e English | 中文 ptcpdump is a tcpdump-compatible packet analyzer powered by eBPF, automatically annotating packets with process/container/pod metadata when detectable. Inspired by jschwinger233/skbdump. Table of Contents Features Installation Requirements Usage...

cve-2019-5736-poc

CVE-2019-5736 Prueba de Concepto Esto agrega una cadena al binario runc del host. Trae tu propio payload ver stage2.c. Para ejecutar: docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...

ipv6_frag_escape

IPV6FRAGESCAPE — Linux IPv6 fragmentation container escape tracking site Source for the IPV6FRAGESCAPE patch-status tracker: a single-page site recording which distributions have shipped a fix for the IPv6 fragmentation container escape in the Linux kernel. Where the facts live Everything about t...