
keyhog
Open-source secret scanner in Rust
cloud-securitycode-analysisconfiguration-auditing+8
1023 days ago

Open-source secret scanner in Rust

Like Envoy xDS, but for eBPF filters

eBPF-based runtime detector for container breakout vulnerabilities in runc and Docker, monitoring syscalls and Docker daemon calls to detect…

Proof-of-concept exploit for CVE-2024-0132 enabling container escape via NVIDIA container toolkit, allowing host filesystem access and Docker daemon…

eBPF-based daemon to mitigate CVE-2026-31431 on systems where `algif_aead` is built into the kernel, without a reboot!