percivalll/copy-fail-cve-2026-31431-kubernetes-pocPoC: fully unprivileged container escape to node-level code execution on Kubernetes via CVE-2026-31431 page-cache corruption + shared image layers.…
starscow/copy-fail-cve-2026-31431-kubernetes-pocProof-of-concept demonstrating container escape on Kubernetes via CVE-2026-31431 kernel page-cache corruption, achieving node-level code execution…
pucagit/cve-2025-9074PoC exploit for CVE-2025-9074 demonstrating a full Docker Desktop container escape on Windows and macOS via an unauthenticated internal Docker Engine…
luotian2/cve-2026-31431Exploit for CVE-2026-31431, a Linux kernel authencesn bug enabling local privilege escalation and container escape via a 4-byte page cache write.
themalwareguardian/cve-2026-31431A structured explanation of CVE-2026-31431 (Copy Fail), connecting the three kernel changes that introduced the vulnerability and enabled its…
locus-x64/cve-2025-61765_pocProof of Concept of an unsafe pickle deserialization vulnerability in Socket.IO
zakariamaaraki/dirty-cow-cve-2016-5195-Exploit the dirtycow vulnerability to login as root
bridgeralderson/cve-2025-9074-pocA vulnerability has been identified in Docker Desktop. A remote attacker could exploit this vulnerability to trigger security restriction bypass on…
percivalll/dirty-frag-kubernetes-pocProof-of-concept demonstrating container escape on Amazon EKS by exploiting Dirty Frag (CVE-2026-43284) kernel page-cache corruption via shared image…
ol0273st-s/cve-2017-1000112-adpatedPOE code for CVE-2017-1000112 adapted to both funtion on a specific VM and Escape a Docker
teawater/cve-2017-5123Reproduction of CVE-2017-5123 kernel vulnerability allowing local privilege escalation via waitid syscall memory write, demonstrated with Docker…
billith/cve-2019-5736-pocProof-of-concept exploit for CVE-2019-5736, a runc container escape that overwrites the host runc binary to achieve root code execution on the host.
cyberark/kubesploitKubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.
gojue/ehids-agentA Linux Host-based Intrusion Detection System based on eBPF.
eshlomo1/cloudsecMaster the art of cloud exploitation. A specialized resource for offensive security researchers and red teamers focused on weaponizing…
zenzue/cve-2025-9074Proof-of-concept exploit for CVE-2025-9074 demonstrating container-to-host file write via exposed Docker Engine API on Windows. For authorized…
sl4ck0th/cve-2026-31431-pocProof-of-concept exploit for CVE-2026-31431, a Linux kernel local privilege escalation via AF_ALG page cache write, achieving root on major…
berdav/cve-2026-41567Exploits CVE-2026-41567 Docker escape using trojanized xz/unpigz binaries to gain a root shell on the host from inside a container.
