Authentication gateway / Dynamic SSH key manager / Privileged access management tool for Linux.
-
Updated
Oct 17, 2022 - Shell
Authentication gateway / Dynamic SSH key manager / Privileged access management tool for Linux.
A statically linked lightweight version of setcap(8) to use in `scratch` images
run executables with capabilities, while using shared libraries from locations in $LD_LIBRARY_PATH, as non-root user
Linux capability bindings for Ruby.
Statistical analysis of getrusage() data for two processes
CentOS based Docker Security Architecture
Evidence-backed minimum-security profiles for container images: the capabilities and read-only-filesystem config each image actually needs, with drop-test proof
Rootless Linux container runtime in Go. Namespaces, cgroups v2, overlayfs, Docker-grade seccomp/capabilities, plus automatic least-privilege hardening: profile an app with ptrace, then enforce only the syscalls, capabilities and writable paths it used. Evaluated with 17 attacks and benchmarks.
A simple Linux process supervisor written in Go.
HTB Lightweight (10.10.10.119)
Inspektor Gadget advisor gadgets: derive minimal capabilities, read-only rootfs + writable paths, and device grants from live eBPF observation
IDOR → cleartext credential exposure → password reuse → Linux capability abuse to root, on HackTheBox's Cap machine.
Run inside any container to immediately understand its attack surface and escape potential.
A program to escalate to root privileges with many different capabilities
To associate your repository with the linux-capabilities topic, visit your repo's landing page and select "manage topics."