
cilium
eBPF-based Networking, Security, and Observability

eBPF-based Networking, Security, and Observability

eBPF LSM based Mandatory Access Control and jailer

Vulnerable Environment and Exploit for CVE-2024-53677

Kubernetes-native security scanning orchestrator that automates continuous vulnerability detection by integrating multiple open-source scanners into…

eBPF Security Monitoring and Sandboxing Agent Based on Aya

A collection of challenge based hack-a-thons including student guide, coach guide, lecture presentations, sample/instructional code and templates. …

eBPF-based Security Observability and Runtime Enforcement

C-based PoC for CVE-2019-5736

Red Team K8S Adversary Emulation Based on kubectl

eBPF-based stealth container that hides processes, sockets, eBPF objects, and audit logs from system monitoring tools, enabling covert…

Vulnerability scanner based on vulners.com audit API

Meaningful control of data in distributed systems.

Lightweight, container-free sandbox for running commands with network and filesystem restrictions

Open-source vulnerability scanner with automated network discovery, CVE-based detection, CVSS scoring, risk dashboards, remote agents via gRPC, and a…

Operator to streamline renovate executions in Kubernetes

POC for CVE-2020-10665 Docker Desktop Local Privilege Escalation

Real-time, container-based file scanning at enterprise scale

PoC for CVE-2026-44848: Portainer missing authorization on Docker plugin endpoints -> host RCE (GHSA-rrmm-9v76-h3p4). Stdlib-only Python.