#1Tools for assessing, testing, and securing cloud environments (AWS, Azure, GCP) and their services.
Kitploit recommended
salt318/cve-2025-1974WHS3기 가상화 취약한(CVE) Docker 환경 구성 과제
shoucheng3/jenkinsci__perfecto-plugin_cve-2020-2261_1-17Jenkins plugin for automated mobile app testing via Perfecto cloud, managing secure tunnel connections and app uploads within CI/CD pipelines.
zulloper/cve-2025-1974CVE-2025-1974 PoC 코드
bgsilvait/win-cve-2021-31166Proof-of-concept for CVE-2021-31166 (http.sys RCE) with Terraform deployment on AWS, including testing scripts and a WAFv2 rule to block the exploit.
thecybergeek/cve-2022-27251Remote Code Execution in LocalStack 0.12.6
charondefalt/cve-2023-34039VMware exploit
likekabin/cve-2019-5736-pocProof-of-concept exploit for CVE-2019-5736, appending a payload to the host runc binary via Docker container escape.
freshdemo/apachestruts-cve-2018-11776Python proof-of-concept exploit for Apache Struts2 CVE-2018-11776 remote code execution vulnerability, with Docker container for testing against…
shoucheng3/jenkinsci__docker-commons-plugin_cve-2022-20617_1-17Jenkins plugin providing shared API for Docker credential management, registry authentication, daemon configuration, and image fingerprinting across…
shoucheng3/asf__nifi_cve-2023-36542_1-22-0Automated data flow platform for processing and distributing data with built-in provenance tracking, secure configuration, and scalable pipeline…
0xbingo/cve-2025-1974A minimal test tool to help detect annotation injection vulnerabilities in Kubernetes NGINX Ingress controllers. This script sends a crafted…
sixpacksecurity/cve-2021-41773CVE-2021-41773 exploit PoC with Docker setup.
acfirthh/cve-2021-41805A proof-of-concept for CVE-2021-41805 which is a vulnerability in HashiCorp Consul Enterprise allowing for Remote Code Execution (RCE) with escalated…
ugorange/cve-2022-3172Proof-of-concept exploit for CVE-2022-3172 in Kubernetes, demonstrating unauthorized access to metrics API via a crafted token.
shoucheng3/aws__aws-sdk-java_cve-2022-31159_1-12-2600Java SDK for integrating with Amazon Web Services, providing secure API access to S3, DynamoDB, EC2, and more, with built-in authentication,…
shoucheng3/apache__nifi_cve-2022-33140_1-16-22Automated data flow processing and distribution system with secure configuration, provenance tracking, and extensible plugin architecture for…
takumak/cve-2019-5736-reproducerReproducer for CVE-2019-5736, a RunC container escape vulnerability. Provides build scripts and a KVM-based lab to confirm the exploit against…
