#1Tools for scanning, securing, and hardening Docker, Kubernetes, and containerized environments.
Kitploit recommended
pompelmi/pompelmiClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or…
rajanagori/nightingaleNightingale Docker for Pentesters is a comprehensive Dockerized environment tailored for penetration testing and vulnerability assessment. It comes…
getkern/kernRootless container runtime and sandbox that launches kernel-enforced OCI images in milliseconds with no daemon, featuring resource profiles, seccomp…
rderaison/bromureProper sandboxing for agentic coding and web browsing
elttam/semgrep-rulesStatic analysis security rules for vulnerability detection and audit-focused code review across Java, Go, Python, C#, Kotlin, PHP, Kubernetes, and…
evict/poc_cve-2018-1002105Proof-of-concept exploit for CVE-2018-1002105 targeting Kubernetes API server. Supports authenticated and unauthenticated privilege escalation to…
cynative/cynativeRead-only AI agent that queries your cloud, code, and runtime infrastructure to surface misconfigurations, leaked secrets, and privilege escalation…
capsulerun/capsuleSecure runtime to sandbox AI agent tasks. Run untrusted code in isolated WebAssembly environments.
ahmed-alnassif/androshAndroSH No-Root Multi-Distro Linux on Android via Shizuku/ADB - Run Arch, Fedora, Alpine, Debian, Ubuntu, Kali, Void, Manjaro, OpenSUSE & Chimera…
madhuakula/hacker-containerThe Swiss Army Container for Cloud Native Security. Container with all the list of useful tools/commands while hacking and securing Containers,…
star-sg/presentationsCurated collection of offensive security conference slide decks covering kernel and mobile exploitation, VM/container escapes, and…
cr0nx/awesome-linux-attack-forensics-purplelabsThis page is a result of the ongoing hands-on research around advanced Linux attacks, detection and forensics techniques and tools.
skorokithakis/stavrobotAn AI personal assistant with a focus on security.
cybereason-public/owlsmSigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
canyonroad/agentshExecution-Layer Security (ELS) for AI agents — policy-enforced shell with audit.
metarget/k0otkitk0otkit is a universal post-penetration technique which could be used in penetrations against Kubernetes clusters.
k8scout/k8scoutDrop a single binary into a compromised Kubernetes pod and instantly map every realistic attack path to cluster-admin, node escape, secret theft,…
linnix-os/linnixeBPF-powered Linux observability with AI incident detection. AGPL-3.0 licensed.
