Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/aquasecurity/scan-cve-2018-8115
Static AnalysisVulnerability ScannersContainer SecuritySupply Chain SecurityMisconfiguration
GitHubaquasecurity/scan-cve-2018-8115

scan-cve-2018-8115

CLI tool that verifies Docker images for CVE-2018-8115 by checking layers for malicious files, helping ensure safe pulls from Docker Hub.

View Repository
7338 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
root@kitploit:~
     /\                       / ____|                    (_) |        
    /  \   __ _ _   _  __ _  | (___   ___  ___ _   _ _ __ _| |_ _   _ 
   / /\ \ / _` | | | |/ _` |  \___ \ / _ \/ __| | | | '__| | __| | | |
  / ____ \ (_| | |_| | (_| |  ____) |  __/ (__| |_| | |  | | |_| |_| |
 /_/    \_\__, |\__,_|\__,_| |_____/ \___|\___|\__,_|_|  |_|\__|\__, |
             | |                                                 __/ |
             |_|                                                |___/
Docker images verifier cli-tool (CVE-2018-8115)

To help the community stay safe, we at Aqua created an open source tool that tests images for whether they are safe of this vulnerability.

This uitlity will connect to the Docker Registry (currently only Docker Hub supported) and check whether an image has a malicous file that can exploit the CVE-2018-8115 vulnerability, known to attack the host as part of a "docker pull" command.

Usage

root@kitploit:~
$ python verify.py [-h] [--tag TAG] [--arch ARCH] [--os OS] image

Example

root@kitploit:~
_____ _ _ /\ / ____| (_) | / \ __ _ _ _ __ _ | (___ ___ ___ _ _ _ __ _| |_ _ _ / /\ \ / _` | | | |/ _` | \___ \ / _ \/ __| | | | '__| | __| | | | / ____ \ (_| | |_| | (_| | ____) | __/ (__| |_| | | | | |_| |_| | /_/ \_\__, |\__,_|\__,_| |_____/ \___|\___|\__,_|_| |_|\__|\__, | | | __/ | |_| |___/ Docker images verifier cli-tool (CVE-2018-8115) To help the community stay safe, we at Aqua created an open source tool that tests images for whether they are safe of this vulnerability. Aqua Security https://www.aquasec.com [~] Fetching evil/image metadata... [+] Checking layer bce2fbc256ea [==================================================] 100% [+] Checking layer cb1aafb71473 [==================================================] 100% [+] Checking layer 782ba98a8cac [==================================================] 100% Found 5 malicious files Layer: 782ba98a8cac, File: ../../../../../../../../fromimage.txt Layer: 782ba98a8cac, File: Files\../../../../../../../../Users/All Users/Application Data/Start Menu/Programs/StartUp/evil.bat Layer: 782ba98a8cac, File: Files\../../../../../../../../Users/All Users/Application Data/Start Menu/Programs/StartUp/Files\script.bat Layer: 782ba98a8cac, File: Files\../../../../../../../Resume.txt Layer: 782ba98a8cac, File: Files\../../../../../../../Files\text.txt === IMAGE IS NOT SAFE! ===

https://www.aquasec.com

Download Tool