Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
POC-IngressNightmare-CVE-2025-1974 — POC IngressNightmare (CVE-2025-1974), modified from https://github.com/yoshino-s/CVE-2025-1974 | Kitploit
Tools/GitHubGitHub/rjhaikal/poc-ingressnightmare-cve-2025-1974
Container SecurityVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingCloud Security
GitHubrjhaikal/poc-ingressnightmare-cve-2025-1974

POC-IngressNightmare-CVE-2025-1974

POC IngressNightmare (CVE-2025-1974), modified from https://github.com/yoshino-s/CVE-2025-1974

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
View Repository
11 year agoNot yet reviewed

POC of IngressNightmare (CVE-2025-1974)

Developed from:

  • https://github.com/yoshino-s/CVE-2025-1974
  • https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities

Talk is cheap, just look at the code.

Detailed can be found at https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities

Usage

  1. Change the ip in shell.c
  2. Check the docker is available and run make shell.so. (We need to build so in alpine to make sure it can works in nginx-ingress-controller which is base on musl-libc)
  3. Run python3 exploit.py to get your shell.

You may need to change the range at line 25 and 26, which indicates the range of the pid and fd. The default value is a compromise between the speed and the success rate.

Download Tool