
kube-hunter
Hunt for security weaknesses in Kubernetes clusters

Hunt for security weaknesses in Kubernetes clusters

The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides…

A collection of challenge based hack-a-thons including student guide, coach guide, lecture presentations, sample/instructional code and templates. …

An open source real-time network topology and protocols analyzer

Policy-driven, layered isolation and containment

Security risk analysis for Kubernetes resources

Weave GitOps is transitioning to a community driven project! It provides insights into your application deployments, and makes continuous delivery…

Cloud-native Kubernetes cluster inspection tool that detects application misconfigurations, unhealthy components, and node problems using custom OPA,…

Kubernetes driver extension of the Chaos Toolkit probes and actions API

Like Envoy xDS, but for eBPF filters

simply nodes and graphs

OWASP Kubernetes security and compliance tool [WIP]

WorldFirst (Public) Docker API Exploit - My security researches involving Docker and Openshift

Detection script for CVE-2026-31431 (Copy Fail) that checks kernel version, patch presence, kernel configs, AF_ALG socket availability, setuid…

Exploit for CVE-2019-5736: runc container escape that overwrites host docker-runc binary with a payload, triggered via docker exec.

Workaround for CVE-2025-52881: Fixes Docker/Podman breakage in Proxmox LXC containers caused by AppArmor incompatibility with runc 1.2.7+. Universal…

Exploit for Linux kernel CVE-2026-31431 causing page cache corruption via authencesn AEAD manipulation, targeting privilege escalation in containers…

Leitwacht control plane — runtime security for GitLab Runner CI/CD: policy authoring, multi-tenancy, audit, GitLab integration