
kubescape
Open-source Kubernetes security platform scanning clusters, manifests, and images for misconfigurations, vulnerabilities, and compliance against NSA,…

Open-source Kubernetes security platform scanning clusters, manifests, and images for misconfigurations, vulnerabilities, and compliance against NSA,…


A vulnerability scanner for container images and filesystems

Intentionally vulnerable Kubernetes cluster environment for hands-on security training. Includes 22+ scenarios covering container escape, RBAC…

📦 Make security testing of K8s, Docker, and Containerd easier.

Peirates - Kubernetes Penetration Testing tool

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

veinmind-tools 是由长亭科技自研,基于 veinmind-sdk 打造的容器安全工具集

A collection of manifests that will create pods with elevated privileges.

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

A container analysis and exploitation tool for pentesters and engineers.

k0otkit is a universal post-penetration technique which could be used in penetrations against Kubernetes clusters.

Unweaponized Proof of Concept for CVE-2019-5736 (Docker escape)

CVE-2019-5736 POCs

Hands-on CI/CD pipeline security workshop with Terraform lab, AWS exploitation, Kubernetes escape, and artifact backdooring exercises for offensive…

PoC and Detection for CVE-2024-21626

Test whether a container environment is vulnerable to container escapes via CVE-2022-0492

CVE-2026-53361 AF_UNIX GC vs MSG_PEEK use-after-free container escape