#1Tools for scanning, securing, and hardening Docker, Kubernetes, and containerized environments.
Kitploit recommended
dougburks/so-cratesSO-CRATES: Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus!
controlplaneio/simulatorKubernetes Security Training Platform - focusing on security mitigation
liske/needrestartSystem utility that identifies and restarts daemons using outdated libraries after package upgrades to maintain security. Supports containers and…
milesrichardson/docker-onion-nmapScan .onion hidden services with nmap using Tor, proxychains and dnsmasq in a minimal alpine Docker container.
beetlechunks/spoolsploitA collection of Windows print spooler exploits containerized with other utilities for practical exploitation.
aaaguirrep/offensive-dockerOffensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.
rajanagori/nightingaleNightingale Docker for Pentesters is a comprehensive Dockerized environment tailored for penetration testing and vulnerability assessment. It comes…
jingkaihe/matchlockEphemeral microVM sandbox for AI agents with network allowlisting, secret injection via MITM proxy, and VM-level isolation. Boots in under a second,…
dockersecurityplayground/dspA Microservices-based framework for the study of Network Security and Penetration Test techniques
lightspin-tech/red-kubeRed Team K8S Adversary Emulation Based on kubectl
backbay-labs/clawdstrikePolicy engine and EDR for AI agent fleets and developer workstations. Monitors tool calls, file access, network flows, and process execution with…
taleliyahu/threat_model_examplesA collection of real-world threat model examples across various technologies, providing practical insights into identifying and mitigating security…
manuelschipper/naha guard that blocks catastrophic agent actions
optiopay/klarIntegration of Clair and Docker Registry
brompwnie/botbA container analysis and exploitation tool for pentesters and engineers.
opsxcq/exploit-cve-2017-7494SambaCry exploit and vulnerable container (CVE-2017-7494)
owasp/python-honeypotOWASP Honeypot, Automated Deception Framework.
afshinm/zeroboxLightweight, cross-platform process sandboxing powered by OpenAI Codex's runtime. Sandbox any command with file, network, and credential controls.
