CVE-2024-5124

desplegar servidor víctima: Instalar docker Install packages required for the installation sudo apt-get update sudo apt install --yes ca-certificates curl sudo install -m 0755 -d /etc/apt/keyrings sudo curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc sudo...

CVE-2022-24481-POC

CVE-2022-24481-POC TL;DR Este PoC está extraído del exp SHA1:fec933b0c46366a1fb272bfaf82a8262597a8d75 y muchos motores antivirus lo detectaron como CVE-2022-24521. Después de analizarlo, descubrí que probablemente sea el exp para CVE-2022-24481, porque CVE-2022-24521 no es una vulnerabilidad de...

botb

Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...

botb

Break out the Box BOtB BOtB 是一款容器分析与利用工具，专为渗透测试工程师和普通工程师设计，同时支持常见的 CI/CD 技术，便于集成到持续集成/持续部署流程中。 它能做什么？ BOtB 是一款 CLI 工具，能够让你： 利用常见的容器漏洞 执行常见的容器后渗透操作 当容器内缺少某些工具或二进制文件时提供替代能力 结合 CI/CD 技术使用 BOtB 的能力测试容器部署 以手动或自动方式执行上述操作 当前能力 通过暴露的 Docker 守护进程（docker.sock）实现容器逃逸 通过 CVE-2019-5736 实现容器逃逸 通过启用 CAPS 和...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.17 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.17 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.36 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.36 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

CVE-2019-17638-Jetty

JETTY The Jetty project is a 100% Java HTTP Server, HTTP Client and Servlet Container from the eclipse foundation http://www.eclipse.org/jetty/ Jetty is open source and is dual licensed using the Apache 2.0 and Eclipse Public License 1.0. You may choose either license when distributing Jetty...

CVE-2022-0847-DirtyPipe-Container-Breakout

DirtyPipe 容器逃逸 PoC 这个仓库包含一个针对 dirtypipe 内核漏洞的 PoC，用于逃逸容器。 更多解释可以在 这篇博客文章 中找到。...

cve-2017-4971

CVE-2017-4971 Esto es parte de Cved: una herramienta para gestionar contenedores Docker vulnerables. Cved: https://github.com/git-rep-src/cved Fuente de la imagen: https://github.com/cved-sources/cve-2017-4971 Autor de la imagen: https://github.com/Medicean/VulApps/tree/master/s/springwebflow/1...

dive

dive A tool for exploring a Docker image, layer contents, and discovering ways to shrink the size of your Docker/OCI image. To analyze a Docker image simply run dive with an image tag/id/digest: dive or you can dive with Docker directly: alias dive="docker run -ti --rm -v...

FRAGNESIA-Charan-cve-2026-46300

Charantej 架构：加固容器暂存与系统调用遥测实验室 一个企业级、纵深防御的容器隔离与运行时安全遥测框架。从思科首席网络安全架构师的角度设计，Charantej 架构隔离暂存运行时、限制系统调用面，并使用主机级审计工具实现实时内核遥测，以保护现代 Linux 容器部署。 高级设计 HLD Charantej 架构强制实施隔离、最小权限容器和外带监控，以确保安全边界能够抵御主机内核妥协向量。 flowchart TD subgraph HostOS "Host OS Secured Linux Node" subgraph Docker "Docker Container...

cve-2018-11776

CVE-2018-11776 Esto es parte de Cved: una herramienta para gestionar contenedores Docker vulnerables. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-11776 Image author: https://github.com/knqyf263/CVE-2018-11776...

cve-2014-6271

CVE-2014-6271 Esto es parte de Cved: una herramienta para gestionar contenedores Docker vulnerables. Cved: https://github.com/git-rep-src/cved Fuente de la imagen: https://github.com/cved-sources/cve-2014-6271 Autor de la imagen:...

cve-2018-1273

CVE-2018-1273 Esto es parte de Cved: una herramienta para gestionar contenedores docker vulnerables. Cved: https://github.com/git-rep-src/cved Fuente de la imagen: https://github.com/cved-sources/cve-2018-1273 Autor de la imagen: https://github.com/Medicean/VulApps/tree/master/s/spring/2...

cve-2019-9194

CVE-2019-9194 Esto es parte de Cved: una herramienta para gestionar contenedores Docker vulnerables. Cved: https://github.com/git-rep-src/cved Fuente de la imagen: https://github.com/cved-sources/cve-2019-9194 Autor de la imagen: https://github.com/cved-sources/cve-2019-9194...

cve-2010-0426

CVE-2010-0426 这是 Cved 的一部分： 一个管理易受攻击的 Docker 容器的工具。 Cved: https://github.com/git-rep-src/cved 镜像来源: https://github.com/cved-sources/cve-2010-0426 镜像作者: https://github.com/t0kx/privesc-CVE-2010-0426...

cve-2017-12615

CVE-2017-12615 Esto es parte de Cved: una herramienta para gestionar contenedores Docker vulnerables. Cved: https://github.com/git-rep-src/cved Fuente de la imagen: https://github.com/cved-sources/cve-2017-12615 Autor de la imagen: https://github.com/Medicean/VulApps/tree/master/t/tomcat/1...

cve-2015-1427

CVE-2015-1427 这是 Cved 的一部分： 一个管理易受攻击的 Docker 容器的工具。 Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2015-1427 Image author: https://github.com/t0kx/exploit-CVE-2015-1427...

cve-2016-6515

CVE-2016-6515 这是 Cved 的一部分： 一个管理易受攻击的 Docker 容器的工具。 Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2016-6515 Image author: https://github.com/opsxcq/exploit-CVE-2016-6515...

cve-2018-16283

CVE-2018-16283 这是Cved的一部分： 一个管理易受攻击的Docker容器的工具。 Cved: https://github.com/git-rep-src/cved 镜像来源: https://github.com/cved-sources/cve-2018-16283 镜像作者: https://github.com/cved-sources/cve-2018-16283...