kalidoulabghaly/log4shell-exploitation-detectionHands-on project demonstrating Log4Shell exploitation, detection engineering with Splunk and auditd, and validated remediation in a containerized…
megadimenex/megahidockerThis project is exploit for some docker containers with similar to vulnerability code: CVE-2020-35191
cgv-dev/metasploit-module-tfmModule written in Ruby with the objective of exploiting vulnerabilities CVE-2023-2728 and CVE-2024-3177, both related to the secret mount policy in a…
magpieryl/cve-2024-3094-backdoor-env-containerThis is a container environment running CVE-2024-3094 sshd backdoor instance, working with https://github.com/amlweems/xzbot project. IT IS NOT…
sonyavalo/cve-2019-5736-dockerattack-and-security-mechanismIn this project, we found a recent attack through the malicious container and implemented a security mechanism to stop it.
microsoft/liteboxA security-focused library OS supporting kernel- and user-mode execution
deepfence/threatmapperOpen Source Cloud Native Application Protection Platform (CNAPP)
provos/ironcurtainA secure* runtime for autonomous AI agents. Policy from plain-English constitutions. (*https://ironcurtain.dev)
jingkaihe/matchlockEphemeral microVM sandbox for AI agents with network allowlisting, secret injection via MITM proxy, and VM-level isolation. Boots in under a second,…
kstenerud/yoloaiYour agent is a security risk, so treat it like one. yoloAI does AI agent sandboxing right.
hakaioffsec/ingressnightmare-pocThis is a PoC code to exploit the IngressNightmare vulnerabilities (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974).
cybersecsi/dockerized-androidA container-based framework to enable the integration of mobile components in security training platforms
chaostoolkit/chaostoolkit-kubernetesKubernetes driver extension of the Chaos Toolkit probes and actions API
gensecaihq/react2shell-scannerDetects CVE-2025-55182 RCE in React Server Components by scanning npm/pnpm/yarn lockfiles, Docker images, SBOMs, and live URLs. Includes auto-fix,…
spiralbl0ck/cve-2023-1206-cve-2025-40040-cve-2024-498823 linux kernel bugs chains to do secure comm app using side channel to establish key and establish covert channe;
zenzue/cve-2025-9074Proof-of-concept exploit for CVE-2025-9074 demonstrating container-to-host file write via exposed Docker Engine API on Windows. For authorized…
shambhavim18/cve-2019-15107-labDocker-based lab demonstrating CVE-2019-15107, the Webmin unauthenticated RCE, covering deployment, exploitation, detection, and remediation.
