Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
mxc — Policy-driven, layered isolation and containment | Kitploit
Tools/GitHubGitHub/microsoft/mxc
Cloud Infrastructure SecurityDefensive ToolsContainer SecurityDynamic Analysis (Sandboxing)Configuration AuditingSecurity Virtualization
GitHubmicrosoft/mxc

mxc

Policy-driven, layered isolation and containment

View Repository
2.7k1451396 days agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

MXC SDK samples

Audience: MXC consumers

These samples demonstrate the supported V1 SDK surfaces in Rust, .NET, and Node. They are organized by scenario so equivalent operations are easy to compare while each implementation remains idiomatic for its language.

ScenarioPurposeRust.NETNode
Run in a persisted containerProvision, start, execute, stop, and deprovisionrun-in-persisted-container/rustrun-in-persisted-container/dotnetrun-in-persisted-container/node
Run in a transient containerBuild and execute a complete run-to-completion requestrun-in-transient-container/rustrun-in-transient-container/dotnetrun-in-transient-container/node
Run with filesystem containmentGrant one host directory read-onlyrun-with-containment-of-filesystem/rustrun-with-containment-of-filesystem/dotnetrun-with-containment-of-filesystem/node
Run with network containmentDeny outbound, inbound, and host-loopback networkingrun-with-containment-of-network/rustrun-with-containment-of-network/dotnetrun-with-containment-of-network/node
Run with logging access deniedCapture blocked ProcessContainer accessesrun-with-logging-access-denied/rustrun-with-logging-access-denied/dotnetrun-with-logging-access-denied/node
Run with captured I/OReturn complete stdout and stderr after exitrun-with-io-captured/rustrun-with-io-captured/dotnetrun-with-io-captured/node
Run with interactive PTY I/OForward an interactive terminalrun-with-io-pty-interactive/rustrun-with-io-pty-interactive/dotnetrun-with-io-pty-interactive/node
Run with streaming standard I/OStream live stdout and stderrrun-with-io-stdio-streaming/rustrun-with-io-stdio-streaming/dotnetrun-with-io-stdio-streaming/node
Run with telemetryRequest consent, then opt one transient run into telemetryrun-with-telemetry/rustrun-with-telemetry/dotnetrun-with-telemetry/node
Check containment supportDiscover support without launching a containerdryrun-check-containment-support/rustdryrun-check-containment-support/dotnetdryrun-check-containment-support/node

Conventions

  • Each sample demonstrates one primary concept through the public versioned V1 API.
  • Requests use typed SDK models rather than "MXC request JSON" or generated JSON serialization types.
  • Commands are harmless, bounded, and selected for the current operating system.
  • Workload failures, timeouts, SDK errors, warnings, and cleanup failures remain visible.
  • Projects reference the SDK in this repository so the samples track the current source.

Running a sample requires a supported and prepared host. See the applicable backend guide under docs/ for platform-specific prerequisites.

Download Tool