#1Container breakout techniques, privilege escalation, and sandbox escape testing tools.
Kitploit recommended

Proof-of-concept exploit for CVE-2021-41091: Moby (Docker Engine) directory traversal allowing unprivileged users to execute SUID binaries from…
Proof-of-concept exploit for CVE-2019-5736, demonstrating Docker container escape via runC vulnerability with reverse shell payload injection.

Analyzes and exploits a container escape vulnerability in legacy Docker/runc versions, demonstrating fd leakage to access the host filesystem, with…

Proof-of-concept exploit for CVE-2021-25741 enabling Kubernetes container escape via subpath volume mount manipulation, designed for security testing…

Proof-of-concept exploit for CVE-2019-5736, appending a payload to the host runc binary via Docker container escape.

Modified version of CVE-2019-5736-PoC by Frichetten

Reproducer for CVE-2019-5736, a RunC container escape vulnerability. Provides build scripts and a KVM-based lab to confirm the exploit against…

Basic POC to test CVE-2024-3094 vulnerability inside K8s cluster

In this project, we found a recent attack through the malicious container and implemented a security mechanism to stop it.

THREE different reproduction, WORKDIR, EXEC & RUNC.

Proof-of-concept for CVE-2024-21626, a container escape vulnerability in runc, demonstrating exploitation techniques.

Proof-of-concept exploit for CVE-2019-5736, a container escape vulnerability in runC that allows overwriting the host runC binary to gain root access…


Some scripts to simulate an attack (used for CVE-2024-21626)

PoC for CVE-2019-5736

Container Excape PoC for CVE-2022-0847 "DirtyPipe"

Proof of concept code for breaking out of docker via runC