
cve-2024-21626
Educational demo of CVE-2024-21626 runc container escape with eBPF-based detection gadget for exploitation attempts.

Educational demo of CVE-2024-21626 runc container escape with eBPF-based detection gadget for exploitation attempts.

Study on CVE-2020-13401 vulnerability of containers in dockers older than 19.03.11

Research and detection guidance for CVE-2026-31431, an io_uring-based bypass of syscall monitoring. Provides detection rules for Tetragon, Falco, and…

A comprehensive collection of 12 containerized web exploitation challenges covering CVE-2023-25690, WebAuthn bypasses, HTTP/3 smuggling, and advanced…

A hands-on forensic walkthrough of CVE-2025-59359, a critical OS command injection flaw in Chaos-Mesh. Learn how attackers hijack Kubernetes clusters…

This Repository Includes Kubernetes manifest files for configuration of Honeypot system and Falco IDS in K8s environment. There are also Demo…

Local Docker lab for comparing vulnerable and patched versions of WPvivid Backup & Migration (CVE-2026-1357) for educational verification and…

Terraform and Docker resources for quickly spinning up a test of CVE-2021-44428

eBPF-based runtime detector for container breakout vulnerabilities in runc and Docker, monitoring syscalls and Docker daemon calls to detect…

Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of particular use…

Simple webhook to block exploitation of CVE-2022-0811

Secure and fast microVMs for serverless computing.

Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.

This repository contains the scanner component for Greenbone Community Edition.

Workload identity platform that attests running services, issues SPIFFE IDs/SVIDs, and enables mTLS and JWT authentication for Kubernetes,…

Hunt for security weaknesses in Kubernetes clusters

Unified application gateway providing reverse proxy, WAF, CC defense, OAuth2 authentication, ACME certificate automation, and GSLB for secure,…

Red Team K8S Adversary Emulation Based on kubectl