#1Tools for assessing, testing, and securing cloud environments (AWS, Azure, GCP) and their services.
Kitploit recommended
tagatac/libvirt-cve-2014-1447Libvirt - Unauthenticated DoS Vulnerability (Exploit & Time Randomization to Thwart It)
robemmerson/cve-2021-4034Dockerized proof-of-concept for CVE-2021-4034 (PwnKit), a local privilege escalation in polkit's pkexec, demonstrating root access from an…
atlassion/rs4logj-cve-2021-44228Provides upgrade and mitigation instructions for Apache Log4j vulnerability CVE-2021-44228 in Remote Syslog products, including version checks and…
shoucheng3/spring-cloud__spring-cloud-config_cve-2020-5405_2-1-6-releaseCentralized configuration server for distributed systems with HTTP API, encryption/decryption of properties, and support for Git, Vault, JDBC, and…
dima2021/cve-2022-42889-text4shellDocker-based lab environment to demonstrate and test the CVE-2022-42889 (Text4Shell) remote code execution vulnerability in Apache Commons Text.
yen5004/cve-2024-40635_pocProof of Concept code for proving CVE-2024-40635 vulnerability
ron-imperva/cve-2025-30065-pocCVE-2025-30065 PoC
shoucheng3/asf__james-project_cve-2022-22931_3-6-0Modular Java mail server supporting IMAP, SMTP, POP3, and JMAP with Docker deployment, distributed architecture, and CLI management for secure…
khuntor/cve-2021-43858-minioGo-based exploit for CVE-2021-43858 targeting MinIO privilege escalation vulnerability. Executes against a specified IP and port to demonstrate the…
fe-ax/tf-cve-2021-36782A Terraform module to launch Rancher 2.6.6 for blog article about CVE-2021-36782
shoucheng3/payara__payara_cve-2022-37422_5-2022-2Jakarta EE and MicroProfile application server runtime for development and containerized deployments, supporting cloud-native middleware with…
shoucheng3/fabric8io__kubernetes-client_cve-2021-4178_5-0-2Java client providing fluent DSL access to Kubernetes and OpenShift REST APIs for managing cloud-native infrastructure, pods, services, and…
meeeeing/cve-2024-36587Proof-of-concept exploit for CVE-2024-36587 demonstrating local privilege escalation in dnscrypt-proxy via binary planting, with Docker-based…
jrbh4ck/cve-2021-41091Proof-of-concept exploit for CVE-2021-41091: Moby (Docker Engine) directory traversal allowing unprivileged users to execute SUID binaries from…
performant-labs/cve-2022-22970Hands-on Dev Container environment for exploring CVE-2022-22970 with a vulnerable Spring application and proof-of-concept exploit code.
sk3pper/cve-2024-21626-old-docker-versionsAnalyzes and exploits a container escape vulnerability in legacy Docker/runc versions, demonstrating fd leakage to access the host filesystem, with…
grtmaldet/big-ip-next-cve-2024-26026Proof-of-concept exploit for CVE-2024-26026: unauthenticated SQL injection in F5 BIG-IP Next Central Manager API, enabling remote data extraction and…
cgv-dev/metasploit-module-tfmModule written in Ruby with the objective of exploiting vulnerabilities CVE-2023-2728 and CVE-2024-3177, both related to the secret mount policy in a…
