
offensive-one-liners
110 offensive-security one-liners for authorized testing and CTFs, grouped by category and kill-chain step.

110 offensive-security one-liners for authorized testing and CTFs, grouped by category and kill-chain step.

Unweaponized Proof of Concept for CVE-2019-5736 (Docker escape)

Proof of concept for CVE-2020-15257 in containerd.

POCs and Tetragon Rules for CVE-2024-21626 and CVE-2025-31133

Linux LPE - Reliable Jail/Container Escape

Proof of concept exploit for CVE-2025-9074 - Unauthenticated Docker Engine API container escape affecting Docker Desktop < 4.44.3 on Windows and…

C implementation of a proof-of-concept for CVE-2026-31431, a Linux kernel AF_ALG page cache poisoning vulnerability that enables local privilege…

Proof-of-concept exploit for CVE-2024-21626, a container escape vulnerability in Docker/runc. Demonstrates file descriptor manipulation to break out…

Proof of concept code for breaking out of docker via runC

Proof of concept code for Datadog Security Labs referenced exploits.

Proof-of-concept exploit for CVE-2025-9074 demonstrating container-to-host file write via exposed Docker Engine API on Windows. For authorized…

Proof-of-concept exploit for CVE-2022-0847 (DirtyPipe) enabling container breakout via kernel privilege escalation. Includes demonstration and…

PHP poc, exploit for CVE-2025-9074

C-based PoC for CVE-2019-5736

CVE-2019-5736 POCs

Docker + CVE-2015-2925 = escaping from --volume

Proof-of-concept exploit for CVE-2022-0185, a Linux kernel heap buffer overflow enabling local privilege escalation and container escape via FUSE and…

Proof-of-Concept exploit for CVE-2025-9074 - Unauthenticated Docker API exposure allowing arbitrary container creation and host filesystem access.