Tools

kubescape/kubescape

Open-source Kubernetes security platform scanning clusters, manifests, and images for misconfigurations, vulnerabilities, and compliance against NSA,…

madhuakula/kubernetes-goat

Intentionally vulnerable Kubernetes cluster environment for hands-on security training. Includes 22+ scenarios covering container escape, RBAC…

aquasecurity/kube-hunter

Hunt for security weaknesses in Kubernetes clusters

sgkdev/page_inject

CVE-2026-31431-killed page-cache exploit — code exec into containers sharing the same image layer

mishl-dev/cve_2026_31431

Exploit for CVE-2026-31431, a Linux kernel page-cache write primitive enabling local privilege escalation and container escape via AF_ALG and…

4nuxd/react2shell

R2S is a comprehensive exploitation and post-exploitation framework targeting the Next.js React Server Components vulnerability (CVE-2025-55182). It…

jpts/cve-2022-0847-dirtypipe-container-breakout

Proof-of-concept exploit for CVE-2022-0847 (DirtyPipe) enabling container breakout via kernel privilege escalation. Includes demonstration and…

fahmifj/docker-breakout-runc

Modified version of CVE-2019-5736-PoC by Frichetten

galoryber/fawkes

Fawkes is a golang Mythic C2 Agent exclusively written by AI.

stealthcopter/deepce

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

hans362/cve-2026-31431-copy-fail-container-escape

Container escape on any docker container with healthcheck enabled via CVE-2026-31431

xeloxa/copyfail-exploit

Copy Fail (CVE-2026-31431) LPE exploit. A clean, multi-arch Python reimplementation targeting the Linux kernel AF_ALG page cache vulnerability.

percivalll/copy-fail-cve-2026-31431-kubernetes-poc

PoC: fully unprivileged container escape to node-level code execution on Kubernetes via CVE-2026-31431 page-cache corruption + shared image layers.…

strikoder-premium/cve-2024-21626-runc-1.1.11-escape

PoC for CVE-2024-21626: runc leaks an internal fd referencing the host CWD before pivot_root, enabling container escape by setting process.cwd to…

aquasecurity/kube-bench

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

chitoz1300/react2shell-cve-2025-55182

* React2Shell-CVE-2025-55182

m4xsec/cve-2026-31431-rce-exploit

Local privilege escalation exploit for CVE-2026-31431, a Linux kernel AF_ALG logic flaw allowing unprivileged users to write 4 bytes into page cache…

starscow/copy-fail-cve-2026-31431-kubernetes-poc

Proof-of-concept demonstrating container escape on Kubernetes via CVE-2026-31431 kernel page-cache corruption, achieving node-level code execution…