#1Container breakout techniques, privilege escalation, and sandbox escape testing tools.
Kitploit recommended
ssst0n3/kata-cve-2020-2023-pocProof-of-concept exploit for Kata Containers container escape (CVE-2020-2023) using mknod to modify guest filesystem and overwrite system binaries…
luotian2/cve-2026-31431Exploit for CVE-2026-31431, a Linux kernel authencesn bug enabling local privilege escalation and container escape via a 4-byte page cache write.
alicey0719/docker-poc_cve-2024-1086Dockerized proof-of-concept for CVE-2024-1086, a Linux kernel privilege escalation exploit that grants root access via a crafted binary.
thekevinday/docker_lightman_exploitDocker CVE-2022-37708
tamatahyt/cve-2026-53576Kestra Unauthenticated RCE Exploit (CVE-2026-53576)
berdav/cve-2026-41567Exploits CVE-2026-41567 Docker escape using trojanized xz/unpigz binaries to gain a root shell on the host from inside a container.
george0papasotiriou/cve-2026-5555-container-escape-via-proc-self-fd-symlink-in-shared-volumeProof-of-concept exploit for CVE-2026-5555, demonstrating container escape via /proc/self/fd symlink in rshared volumes to overwrite host files and…
oilseller2001/poc-for-cve-2025-9074Proof-of-Concept exploit for CVE-2025-9074 - Unauthenticated Docker API exposure allowing arbitrary container creation and host filesystem access.
zhangguanzhang/cve-2024-21626Proof-of-concept exploit for CVE-2024-21626, a runc container escape vulnerability allowing host file system access via crafted working directory in…
go-lanz/persistnuxBash-based Linux persistence detection tool for DFIR investigations. Scans 15+ persistence mechanisms (systemd, cron, kernel modules, SSH,…
kianabin/cve-2022-0492-container-escapeCVE-2022-0492-Container-Escape
c-h4ck-0/learn-about-cve-2025-31133-pocEducational proof-of-concept for CVE-2025-31133, a runc container escape via maskedPaths race condition. Includes lab setup, exploit script, and…
yandex-cloud-examples/yc-mk8s-sctphantom-mitigationDaemonSet для митигации уязвимости CVE-2026-64564 (SCTPhantom)
wattocyber/offensive-one-liners110 offensive-security one-liners for authorized testing and CTFs, grouped by category and kill-chain step.
horkimhab/cve-2026-53365CVE-2026-53365
epsteina16/docker-escape-minerCode sample for using exploit CVE-2019-5736 to mine bitcoin with no association to original container or user.
suominen/ipv6_frag_escapeTracking IPV6_FRAG_ESCAPE (CVE-2026-53362, CVE-2026-53366), the IPv6 fragmentation container escape
ptechamanja/cve-2025-9074-docker-desktop-container-escapeProof of concept exploit for CVE-2025-9074 - Unauthenticated Docker Engine API container escape affecting Docker Desktop < 4.44.3 on Windows and…
