vinieger-CVE-2025-48384-Dockerfile

vinieger-CVE-2025-48384-Dockerfile This provised a PoC dockerfile image for CVE-2025-48384, related to https://github.com/vinieger/CVE-2025-48384, so it can be tested inside a Kubernetes cluster. Deploying it to GKE: Building and Publishing to GCP registry: change your registry path root@kitploit...

gha-lab-a815a82f03-1

CloudPirates ओपन सोर्स हेल्म चार्ट्स क्लाउड-नेटिव एप्लिकेशनों के लिए प्रोडक्शन-रेडी हेल्म चार्ट्स का एक चयनित संग्रह। यह रिपॉजिटरी क्लाउड-नेटिव सर्वोत्तम प्रथाओं का पालन करते हुए सुरक्षित, अच्छी तरह से प्रलेखित और कॉन्फ़िगरेबल हेल्म चार्ट प्रदान करती है। ⚠️ महत्वपूर्ण : 15 अप्रैल, 2026 से, सभी...

cve-2023-5044

CVE-2023-5044 Ingress Nginx Exploit Proof-Of-Concept This is a quick Go program to exploit the recent CVE in the Ingress Nginx controller. Details on how to do this are already out there via Rory McCune's blog at https://raesene.github.io/blog/2023/10/29/exploiting-CVE-2023-5044/, this just...

POC-IngressNightmare-CVE-2025-1974

POC of IngressNightmare CVE-2025-1974 Developed from: https://github.com/yoshino-s/CVE-2025-1974 https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Talk is cheap, just look at the code. Detailed can be found at https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Usage 1...

ZigRaceExploit

CVE-2021-25741 — TOCTOU Symlink Race Exploit in Zig Educational exploit of the TOCTOU Time Of Check, Time Of Use race condition behind CVE-2021-25741, a vulnerability in the Kubernetes kubelet. The project demonstrates locally without a K8s cluster how a concurrent symlink swap can bypass a path...

powerfulseal

PowerfulSeal PowerfulSeal injects failure into your Kubernetes clusters, so that you can detect problems as early as possible. It allows for writing scenarios describing complete chaos experiments. Embrace the inevitable failure. Embrace The Seal. Documentation Please refer to the Powerfulseal...

chaostoolkit-kubernetes

Chaos Toolkit Extensions for Kubernetes This project contains activities, such as probes and actions, you can call from your experiment through the Chaos Toolkit to perform Chaos Engineering against the Kubernetes API: killing a pod, removing a statefulset or node... Install To be used from your...

IngressNightterror

IngressNightterror CVE-2025-1974 Overview This repository is my research on IngressNightmare vulnerability. It includes a vulnerable Ingress deploy files, exploit itself and shared object payload. CVE The list of CVE indexes: CVE-2025-1974 - Root vulnerability CVE-2025-24514 - auth-url annotation...

krane

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

krane

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

CVE-2026-54761-poc

CVE-2026-54761: Bypass de crossProviderNamespaces en Traefik Kubernetes Gateway PoC Versión en inglés Resumen Este repositorio es una prueba de concepto PoC para reproducir localmente la vulnerabilidad de alta gravedad CVE-2026-54761 presente en el proveedor Kubernetes Gateway de Traefik. Esta...

CVE-2025-1974

DEMO https://youtu.be/3hYlHeaf2mQ What is CVE-2025-1974? CVE-2025-1974 IngressNightmare is a critical CVSS 9.8 unauthenticated Remote Code Execution vulnerability in the Kubernetes ingress-nginx admission controller. Attack Flow: 1. Upload : Send malicious shared library .so file to NGINX via HTT...

CVE-2026-3288

CVE-2026-3288: ingress-nginx Configuration Injection via rewrite-target Annotation Keywords: CVE-2026-3288, ingress-nginx vulnerability, Kubernetes security, nginx configuration injection, rewrite-target annotation, RCE, Secret disclosure, CWE-20, CAPEC-176, ingress-nginx CVE 2026, Kubernetes...

CVE-2024-36539

Here’s a README.md for a Proof of Concept PoC demonstrating the insecure permissions vulnerability in Contour v1.28.3: Proof of Concept PoC for Insecure Permissions Vulnerability in Contour v1.28.3 This repository contains a Proof of Concept PoC script demonstrating an insecure permissions...

BLACKHAT_USA2022

BLACKHATUSA2022 Just About BLACKHAT USA2022 PDF Public Download in release or this mirror File List, Search what your intersting. root@kitploit: ├── BLACKHATUSA2022 │ ├── Taking Kerberos To The Next Level.pdf │ ├── US-22-ABDELLATIF-Unlimited-Results-Breaking-Firmware-Encryption.pdf │ ├──...

Metasploit-Module-TFM

Módulo Personalizado de Metasploit para CVE 2023-2728 y CVE 2024-3177 Descripción Este módulo personalizado explota CVE 2023-2728 y CVE 2024-3177 en versiones de Kubernetes que son vulnerables a cada uno de ellos por ejemplo, v1.27.2 es vulnerable a ambos, ambos relacionados con la evasión de la...

CVE-2025-1974

🚨 Log Injection Test via Ingress-NGINX Admission Controller 🧠 Overview This script tests for annotation injection vulnerabilities in Kubernetes clusters using the NGINX Ingress Controller. It is meant for detection purposes only in relation to CVE-2025-1974, which allows malicious annotations to...

CVE-2024-3094

CVE-2024-3094 Basic POC to test CVE-2024-3094 vulnerability inside K8s cluster ❗ DISCLAIMER ❗ USE ONLY FOR EDUCATIONAL PURPOSES THE AUTHOR IS NOT RESPONSIBLE FOR ANY DAMAGE CAUSED BY THE USE OF THIS SOFTWARE Description We will deploy a vulnerable pod and exploit it to execute commands inside tha...

Threat_Model_Examples

Threat Model Examples This repository contains various threat model examples for different technologies and systems. These resources provide illustrative examples of threat models across different domains, helping security professionals, developers, and researchers better understand how threat...

CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability

CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability By Mark Mallia Containerization and the Power of Automation Containerization is the backbone of modern application delivery: it bundles an entire runtime stack into a single, immutable image that can be rolled out on any host in a cluster...