CVE-2026-31431-Copy-Fail-Container-Escape
hans362/cve-2026-31431-copy-fail-container-escapeContainer escape on any docker container with healthcheck enabled via CVE-2026-31431
cloud-securitycontainer-escapecontainer-security+3
hans362/cve-2026-31431-copy-fail-container-escapeContainer escape on any docker container with healthcheck enabled via CVE-2026-31431
percivalll/dirty-frag-kubernetes-pocProof-of-concept demonstrating container escape on Amazon EKS by exploiting Dirty Frag (CVE-2026-43284) kernel page-cache corruption via shared image…
qi4l/cve-2026-31431-container-escapeProof-of-concept container escape exploit targeting CVE-2026-31431 in runC, demonstrating privilege escalation and namespace breakout for security…
wuzuowei/copy-fail-cve-2026-31431Exploit for CVE-2026-31431, a Linux kernel authencesn vulnerability enabling local privilege escalation to root and container escape via AF_ALG and…
betep0k/cve-2021-25741Exploit for CVE-2021-25741 Kubernetes vulnerability allowing host filesystem mount into pods via race condition, with deployment scripts and…
controlplaneio/kubesecSecurity risk analysis for Kubernetes resources
falcosecurity/falcoReal-time cloud-native runtime security agent for Linux that monitors syscalls and container/Kubernetes metadata to detect anomalous behavior and…
google/gvisorSandboxes containers via a userspace application kernel that intercepts system calls, limits host kernel access, and integrates with…
nestybox/sysboxAn open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.
stackrox/kube-linterKubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best…
open-policy-agent/opaDeclarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…
wattocyber/offensive-one-liners110 offensive-security one-liners for authorized testing and CTFs, grouped by category and kill-chain step.
yandex-cloud-examples/yc-mk8s-sctphantom-mitigationDaemonSet для митигации уязвимости CVE-2026-64564 (SCTPhantom)
kata-containers/kata-containersKata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel…
wavestone-cdt/defcon-cicd-pipelines-workshopHands-on CI/CD pipeline security workshop with Terraform lab, AWS exploitation, Kubernetes escape, and artifact backdooring exercises for offensive…
bishopfox/badpodsA collection of manifests that will create pods with elevated privileges.
zpxlz/cve-2024-21626-pocProof-of-concept exploit for CVE-2024-21626, a container escape vulnerability in runc/Docker using file descriptor manipulation. For educational and…
666asd/cve-2024-23653Proof-of-concept demonstrating CVE-2024-23653, a BuildKit container escape via a malicious Dockerfile frontend, using buildctl to inspect process…