#1Tools for scanning, securing, and hardening Docker, Kubernetes, and containerized environments.
Kitploit recommended
amulyakaushik/cve-2023-27163-labDocker-based lab reproducing CVE-2023-27163 SSRF in Request-Baskets, with exploitation verification, detection script, and network-isolation…
cgwalters/container-cve-2021-22555Containerized reproducer for CVE-2021-22555 Linux privilege escalation, with seccomp mitigation profiles and deployment guidance for Kubernetes and…
saina15/cve-2020-14343-labControlled vulnerability research and reproduction lab for CVE-2020-14343 in PyYAML
abraxas/spark-proxyuser-classpathApache Spark 4.2.0 - High - Remote - Privilege leftover - proxy-user defaultExtraClassPath
apaonum/brotli-cve-checkAgent skill + script to scan projects for CVE-2026-111497 (Brotli), rate criticality and suggest fixes
mc493/linux-kernel-zero-day-mitigation-zero-downtime-kernel-defense-Zero-downtime Linux kernel zero-day defense case study. For the automated CLI and dual-witness notary framework, see mc493/kshield.
kavryxdev-group/sandboxed-untrusted-code-execution-runnerExecutes untrusted Python, JavaScript, and Bash in a hardened jail with 5-second, 128 MB, 0.5-core, PID and output limits.
discordianfish/cve-2022-0185-crash-pocDocker container that runs a crash proof-of-concept for CVE-2022-0185, a Linux kernel vulnerability. Designed for unprivileged execution to test…
ashardev002/cve-2025-32463_chwoot🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.
v0wkeep3r/cve-2024-21626-runcpocProof-of-concept for CVE-2024-21626, a runc container escape vulnerability. Includes verification scripts, two exploitation methods (cron reverse…
nu0l/nginx-riftCVE-2026-42945 NGINX 堆溢出漏洞扫描与验证工具
r0binak/cve-2024-0132CVE-2024-0132 – Fully Weaponized NVIDIA Container Toolkit Exploit
thodoristsampouris/agentguardZero-trust sandbox for AI agents with kernel-level filesystem jail, transparent network proxy, and YAML-based policy engine to intercept and control…
leitwacht/leitwachtLeitwacht control plane — runtime security for GitLab Runner CI/CD: policy authoring, multi-tenancy, audit, GitLab integration
cdxiaodong/cve-2024-21626Proof-of-concept exploit for CVE-2024-21626 runc container breakout via leaked file descriptors and process.cwd manipulation, enabling host…
cyberhades/hardening-k8s-containersHands-on lab demonstrating Kubernetes container hardening by comparing default vs. security-enhanced deployments of a vulnerable note-taking…
j3r1ch0123/cve-2025-9074New vulnerability found in Docker. Credit for finding the vulnerability goes to Felix Boulet
aquasecurity/trivy-module-wordpressTrivy example module for WordPress
