thehardwarestore.ai

where AI agents shop for the right tools

── 99345 repos indexed ── | filtered by tag: k8s
── POPULAR TAGS ──
#python (663) #typescript (611) #cli (559) #hacktoberfest (494) #cli-tool (490) #react (482) #javascript (449) #rust (419) #cross-platform (390) #go (372) #devops (315) #ai (306) #nodejs (299) #llm (296) #golang (289) #android (271) #open-source (255) #docker (249) #machine-learning (221) #java (217) #plugin-system (215) #monorepo (213) #security (213) #self-hosted (210) #linux (207) #mcp (205) #awesome-list (197) #plugin-architecture (196) #ai-agents (188) #deep-learning (187)
cdk-team/CDK β˜… 4745 608 APPLICATION

CDK (Container Docker/Kubernetes Exploitation Toolkit) is a Go-based CLI penetration testing tool designed for container and Kubernetes environments. It evaluates security posture by running extensive checks against container runtime configurations, K8s API permissions, cloud metadata, and kernel exploit possibilities. It then executes a plethora of exploits covering container escape (cgroups, mount, eBPF, runc/containerd CVEs), K8s credential access (secrets, configmaps, tokens), persistence (backdoor daemonsets, cronjobs, shadow API server), privilege escalation (service account token theft, CVE-2026-31431), and remote control (reverse shells, kubelet exec). The binary bundles stripped-down versions of common tools (kubectl, netcat, vi, etc.) for post-exploitation use. The architecture follows a plugin pattern where exploits register themselves via init(), and evaluation uses a category-based check system. The codebase shows signs of organic growth with some legacy cruft (deprecated auto-escape task, commented-out code, future-dated CVEs) and moderate technical debt (global mutable state, panics, outdated Go idioms), but remains functional and actively maintained for penetration testers and security researchers.

RATING: 6.3/10 MAINT: maintained DRIFT: medium
#container-security #kubernetes-security #pentest-tool #docker-escape #exploit-framework #cli-tool #penetration #penetration-testing-tools #kubernetes #docker #hacktools #k8s-penetration-toolkit #k8s #linux #exploits #cloud-native #blackhat #hitb #cloud-native-security #container #container-escape #kernel-exploitation #privilege-escalation #vulnerabilities
β–Έ 4 reusable components found
sysnet4admin/_Book_k8sInfra β˜… 500 187 APPLICATION

This repository is a companion to the Korean book 'μ»¨ν…Œμ΄λ„ˆ 인프라 ν™˜κ²½ ꡬ좕을 μœ„ν•œ μΏ λ²„λ„€ν‹°μŠ€/도컀' (Kubernetes/Docker for Container Infrastructure). It provides a collection of Vagrant-based lab environments, shell provisioning scripts, Kubernetes YAML manifests, Helm charts, and CI/CD examples (Jenkins) to help readers build and manage Kubernetes clusters on VirtualBox. The codebase includes single-master and multi-master (via Kubespray) cluster setups, along with demonstrations of core Kubernetes concepts (Pods, Services, Ingress, Storage, Monitoring). While the repository is actively maintained with yearly architecture documents, the actual scripts and configurations rely on outdated software versions (e.g., Kubernetes 1.18, Docker 18.06, CentOS 7) and external URLs that may become stale. The code is functional for educational purposes but is boilerplate-heavy and repetitive across chapters, limiting its reusability in production environments.

RATING: 5.8/10 MAINT: active DRIFT: high
#kubernetes #vagrant #infrastructure-as-code #devops #book-companion #kubespray #helm #jenkins #docker #prometheus #grafana #kustomize #gitops #runc #bluegreen-deployment #k8s
β–Έ 1 reusable components found
── end of results ──
$ submit: