
CVE-2026-31431-Copy-Fail
Local privilege escalation exploit for CVE-2026-31431 in the Linux kernel crypto subsystem, providing root access and container breakout with a…

Local privilege escalation exploit for CVE-2026-31431 in the Linux kernel crypto subsystem, providing root access and container breakout with a…

Security risk analysis for Kubernetes resources

Sandboxes containers via a userspace application kernel that intercepts system calls, limits host kernel access, and integrates with…

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.

Walk any memory dump. Find what's hidden. Linux + Windows kernel forensics from a single static Rust binary — no Python required.

KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best…

FastGPT Python sandbox escape chain audit tool (CVE-2026-32128 related, v4.14.8 inspect chain)

Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel…

Proof of concept code for Datadog Security Labs referenced exploits.

This repository provides a high-fidelity technical deconstruction and production-ready exploitation suite for CVE-2019-5736. It demonstrates how a…

In this project, we found a recent attack through the malicious container and implemented a security mechanism to stop it.

Live cryptojacking toolkit with CVE-2026-31431 LPE exploit, container escape, kernel rootkit, and XMRig Monero miner, captured from real attacks for…

Run iOS apps without actually installing them!

Bash-based Linux persistence detection tool for DFIR investigations. Scans 15+ persistence mechanisms (systemd, cron, kernel modules, SSH,…

A Linux Host-based Intrusion Detection System based on eBPF.

veinmind-tools 是由长亭科技自研,基于 veinmind-sdk 打造的容器安全工具集

k0otkit is a universal post-penetration technique which could be used in penetrations against Kubernetes clusters.