#1Container breakout techniques, privilege escalation, and sandbox escape testing tools.
Kitploit recommended
ssst0n3/docker-cve-2022-39253-pocProof-of-concept exploit for CVE-2022-39253 demonstrating Docker container escape via malicious Git repository build, enabling host file system read…
percivalll/dirty-frag-kubernetes-pocProof-of-concept demonstrating container escape on Amazon EKS by exploiting Dirty Frag (CVE-2026-43284) kernel page-cache corruption via shared image…
zenzue/cve-2025-9074Proof-of-concept exploit for CVE-2025-9074 demonstrating container-to-host file write via exposed Docker Engine API on Windows. For authorized…
kagami/docker_cve-2015-2925Docker + CVE-2015-2925 = escaping from --volume
shaoshi17/cve-2025-9074-docker-exploit一个功能强大的 Docker 远程 API 漏洞利用工具，用于 CVE-2025-9074 漏洞的安全研究和测试。
m4xsec/cve-2026-31431-rce-exploitLocal privilege escalation exploit for CVE-2026-31431, a Linux kernel AF_ALG logic flaw allowing unprivileged users to write 4 bytes into page cache…
t1erno/cve-2022-0492-docker-breakout-checker-and-pocDocker Breakout Checker and PoC via CAP_SYS_ADMIN and via user namespaces (CVE-2022-0492)
0xblackash/cve-2026-43499CVE-2026-43499
v0wkeep3r/cve-2024-21626-runcpocProof-of-concept for CVE-2024-21626, a runc container escape vulnerability. Includes verification scripts, two exploitation methods (cron reverse…
r0binak/cve-2024-0132CVE-2024-0132 – Fully Weaponized NVIDIA Container Toolkit Exploit
cdxiaodong/cve-2024-21626Proof-of-concept exploit for CVE-2024-21626 runc container breakout via leaked file descriptors and process.cwd manipulation, enabling host…
sl4ck0th/cve-2026-31431-pocProof-of-concept exploit for CVE-2026-31431, a Linux kernel local privilege escalation via AF_ALG page cache write, achieving root on major…
kianabin/cve-2022-0847-container-escapeCVE-2022-0847 used to achieve container escape 利用CVE-2022-0847 (Dirty Pipe) 实现容器逃逸
yanxinwu946/cve-2026-46331CVE-2026-46331 act_pedit page-cache corruption exploit, with Alpine PIE fix
ssst0n3/poc-cve-2024-0132Proof-of-concept exploit for CVE-2024-0132 enabling container escape via NVIDIA container toolkit, allowing host filesystem access and Docker daemon…
jpts/cve-2022-0847-dirtypipe-container-breakoutProof-of-concept exploit for CVE-2022-0847 (DirtyPipe) enabling container breakout via kernel privilege escalation. Includes demonstration and…
666asd/cve-2024-23653Proof-of-concept demonstrating CVE-2024-23653, a BuildKit container escape via a malicious Dockerfile frontend, using buildctl to inspect process…
sandraschi/copy-fail-mcpCVE-2026-31431 Copy Fail — Linux kernel LPE tester via MCP
