Authentication gateway / Dynamic SSH key manager / Privileged access management tool for Linux.
-
Updated
Oct 17, 2022 - Shell
Authentication gateway / Dynamic SSH key manager / Privileged access management tool for Linux.
A statically linked lightweight version of setcap(8) to use in `scratch` images
run executables with capabilities, while using shared libraries from locations in $LD_LIBRARY_PATH, as non-root user
Linux capability bindings for Ruby.
Statistical analysis of getrusage() data for two processes
CentOS based Docker Security Architecture
Evidence-backed minimum-security profiles for container images: the capabilities and read-only-filesystem config each image actually needs, with drop-test proof
A simple Linux process supervisor written in Go.
Rootless Linux container runtime in Go. Namespaces, cgroups v2, overlayfs, Docker-grade seccomp/capabilities, plus automatic least-privilege hardening: profile an app with ptrace, then enforce only the syscalls, capabilities and writable paths it used. Evaluated with 17 attacks and benchmarks.
Run inside any container to immediately understand its attack surface and escape potential.
HTB Lightweight (10.10.10.119)
Inspektor Gadget advisor gadgets: derive minimal capabilities, read-only rootfs + writable paths, and device grants from live eBPF observation
IDOR → cleartext credential exposure → password reuse → Linux capability abuse to root, on HackTheBox's Cap machine.
A program to escalate to root privileges with many different capabilities
To associate your repository with the linux-capabilities topic, visit your repo's landing page and select "manage topics."