Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-1974 — Exploit for CVE-2025-1974 targeting ingress-nginx controllers in Kubernetes, enabling container escape via crafted shared object injection and shell access. | Kitploit
Tools/GitHubGitHub/yoshino-s/cve-2025-1974
Privilege EscalationVulnerability AnalysisExploitationWeb SecurityCloud SecurityContainer Escape
GitHubyoshino-s/cve-2025-1974

CVE-2025-1974

Exploit for CVE-2025-1974 targeting ingress-nginx controllers in Kubernetes, enabling container escape via crafted shared object injection and shell access.

View Repository
531041 year agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

README

Talk is cheap, just look at the code.

Detailed can be found at https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities

Usage

  1. Change the ip in shell.c
  2. Check the docker is available and run make shell.so. (We need to build so in alpine to make sure it can works in nginx-ingress-controller which is base on musl-libc)
  3. Run python3 exploit.py to get your shell.

You may need to change the range at line 25 and 26, which indicates the range of the pid and fd. The default value is a compromise between the speed and the success rate. You can get the target value by running kpexec -n ingress-nginx ingress-nginx-controller-xxxxxxxxx-xxxxx -it -- bash to get into container by root and run ls -ahl /proc/*/fd/* | grep body in container, when you are in proofing env.

Download Tool