#1Container breakout techniques, privilege escalation, and sandbox escape testing tools.
Kitploit recommended
yandex-cloud-examples/yc-mk8s-sctphantom-mitigationDaemonSet для митигации уязвимости CVE-2026-64564 (SCTPhantom)
bishopfox/badpodsA collection of manifests that will create pods with elevated privileges.
qi4l/cve-2026-31431-container-escapeProof-of-concept container escape exploit targeting CVE-2026-31431 in runC, demonstrating privilege escalation and namespace breakout for security…
eshlomo1/cloudsecMaster the art of cloud exploitation. A specialized resource for offensive security researchers and red teamers focused on weaponizing…
go-lanz/persistnuxBash-based Linux persistence detection tool for DFIR investigations. Scans 15+ persistence mechanisms (systemd, cron, kernel modules, SSH,…
twappz/htb-silentium-writeupHack The Box - Silentium machine writeup | CVE-2025-58434, CVE-2025-59528, CVE-2025-8110
0xfuffm3/cve-2026-31431-copyfailProof-of-concept exploit for CVE-2026-31431 (Copy Fail), a Linux kernel LPE via algif_aead page-cache corruption, with detection, lab, and mitigation…
krish-foren6/cve-2026-31431-report-copy-fail-vulnerability-Detailed analysis of the Copy Fail vulnerability (CVE-2026-31431) in the Linux kernel, including memory corruption mechanism, privilege escalation…
datadog/security-labs-pocsProof of concept code for Datadog Security Labs referenced exploits.
sgkdev/ipv6_frag_escapeLinux LPE - Reliable Jail/Container Escape
chenaotian/cve-2022-0185CVE-2022-0185 POC and Docker and Analysis write up
ssst0n3/kata-cve-2020-2023-pocProof-of-concept exploit for Kata Containers container escape (CVE-2020-2023) using mknod to modify guest filesystem and overwrite system binaries…
themalwareguardian/cve-2026-31431A structured explanation of CVE-2026-31431 (Copy Fail), connecting the three kernel changes that introduced the vulnerability and enabled its…
suominen/ipv6_frag_escapeTracking IPV6_FRAG_ESCAPE (CVE-2026-53362, CVE-2026-53366), the IPv6 fragmentation container escape
sofianehamlaoui/cve-2022-0492-checkerA script to check if a container environment is vulnerable to container escapes via CVE-2022-0492
c-h4ck-0/learn-about-cve-2025-31133-pocEducational proof-of-concept for CVE-2025-31133, a runc container escape via maskedPaths race condition. Includes lab setup, exploit script, and…
davidrxchester/cve-2026-5843Docker Container Escape POC via mlx-metal importlib
tamatahyt/cve-2026-53576Kestra Unauthenticated RCE Exploit (CVE-2026-53576)
