
cve-2019-5736-poc
Unweaponized Proof of Concept for CVE-2019-5736 (Docker escape)

Unweaponized Proof of Concept for CVE-2019-5736 (Docker escape)

Proof of concept for CVE-2020-15257 in containerd.

POCs and Tetragon Rules for CVE-2024-21626 and CVE-2025-31133

Proof of concept exploit for CVE-2025-9074 - Unauthenticated Docker Engine API container escape affecting Docker Desktop < 4.44.3 on Windows and…

Proof-of-concept exploit for CVE-2024-21626, a container escape vulnerability in Docker/runc. Demonstrates file descriptor manipulation to break out…

Proof of concept code for breaking out of docker via runC

Proof-of-concept exploit for CVE-2025-9074 demonstrating container-to-host file write via exposed Docker Engine API on Windows. For authorized…

C-based PoC for CVE-2019-5736

CVE-2019-5736 POCs

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Educational proof-of-concept for CVE-2025-31133, a runc container escape via maskedPaths race condition. Includes lab setup, exploit script, and…

110 offensive-security one-liners for authorized testing and CTFs, grouped by category and kill-chain step.

insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces.

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

Proof-of-concept for CVE-2024-21626, a runc container escape vulnerability. Includes verification scripts, two exploitation methods (cron reverse…

Demonstration of CVE-2024-21626 container escape exploit allowing host root access via malicious Docker image, with step-by-step attack scenario for…

Validation of best practices in your Kubernetes clusters