Tools

laysakura/cve-2024-21626-demo

Demonstration of CVE-2024-21626 container escape exploit allowing host root access via malicious Docker image, with step-by-step attack scenario for…

rishvic/xpdf-docker

Docker images of Xpdf 4.04, vulnerable to CVE-2022-30524

kavin71725/cve-2025-12543-fix-for-wildfly

Docker base image with backported Host header validation fix for CVE-2025-12543 in Undertow 1.4.x, enabling secure deployment of WildFly 11…

detect-defenselab/cve-2026-31431-detection-defense

Research and detection guidance for CVE-2026-31431, an io_uring-based bypass of syscall monitoring. Provides detection rules for Tetragon, Falco, and…

cashwilliams/cve-2019-14287-demo

This is a container built for demonstration purposes that has a version of the sudo command which is vulnerable to CVE-2019-14287

knqyf263/aqua-checksums

Monitors cryptographic integrity of container images, releases, and Git tags for supply chain security, verifying Sigstore cosign signatures with…

jakeswiz/telnet-inetutils-auth-bypass-cve-2026-24061

This is a simple PoC that allows you to highlight the severity of the ongoing and actively exploited Telnet bug that is going on right now. Why…

mochizuki875/cve-2014-6271-apache-debian

This Repo is PoC environment of CVE-2014-6271(https://nvd.nist.gov/vuln/detail/cve-2014-6271).

bongni/cve-2025-29927

Reproduction and fix of the CVE-2025-29927 vulnerability.

nickylimjj/cve-2019-12735

Docker image that lets me study the exploitation of the VIM exploit

iteride/cve-2025-1974

In-depth technical analysis of CVE-2025-1974 (IngressNightmare), a critical RCE in ingress-nginx validating admission controller for Kubernetes,…

cved-sources/cve-2017-8046

Docker-based vulnerable environment for CVE-2017-8046 Spring framework remote code execution exploit, part of the Cved vulnerable container…

cved-sources/cve-2018-15473

Docker-based vulnerable environment for CVE-2018-15473 exploitation, part of the Cved framework for managing and testing against known…

skysbsb/cve-2024-21626-poc

Proof-of-concept exploit for CVE-2024-21626, a container escape vulnerability in Docker/runc. Demonstrates file descriptor manipulation to break out…

mrk336/cluster-chaos-exploiting-cve-2025-59359-for-kubernetes-takeover

A hands-on forensic walkthrough of CVE-2025-59359, a critical OS command injection flaw in Chaos-Mesh. Learn how attackers hijack Kubernetes clusters…

cved-sources/cve-2017-12615

Docker container providing a vulnerable Apache Tomcat environment for CVE-2017-12615 exploitation, enabling hands-on practice of PUT method file…

adarkst/honeypot_smart_infrastructure

This Repository Includes Kubernetes manifest files for configuration of Honeypot system and Falco IDS in K8s environment. There are also Demo…