EN
ENNA

CDK

Apache-2.0

๐Ÿ“ฆ Container Security ยท Go

CDK (Container penetration toolkit) is an open-source tool designed for container environment penetration testing and exploitation. It's distributed as a single static binary with zero dependencies, making it easy to deploy inside target containers during red team engagements. CDK bundles three categories of functionality: evaluation (gathering container environment information, checking capabilities, and identifying potential escape vectors), exploitation (automated container escape using techniques like mounting host filesystems, exploiting Docker socket, abusing Linux capabilities, and leveraging kernel vulnerabilities), and tools (network scanning, file transfer, reverse shell, and other post-exploitation utilities). CDK is regularly updated with new escape techniques as they're discovered, making it the most comprehensive container escape toolkit available.

4.6kstars
599forks
16issues
Updated 1mo ago

Installation

Download

$ Download static binary from GitHub releases

from source

$ git clone https://github.com/cdk-team/CDK.git && cd CDK && make

Use Cases

  • Evaluating container security posture by checking capabilities and mounts
  • Automated container escape via Docker socket, host mounts, and kernel exploits
  • Post-exploitation inside containers including network scanning and file transfer
  • Red team operations targeting containerized environments and Kubernetes clusters
  • Testing container isolation and security boundaries during penetration tests

Tags

container-escapedockerkubernetescapabilitiesred-teampost-exploitationblackhatcloud-nativecloud-native-securitycontainercontainer-securityexploitshacktoolshitbk8sk8s-penetration-toolkitkernel-exploitationkubernetes-securitylinuxpenetrationpenetration-testing-toolsprivilege-escalationvulnerabilities

More in Container Security