sfmatt/flask-vuln-demo-nonroot repository overview

Flask RCE Demo App

This is an intentionally vulnerable Flask application designed for Kubernetes security testing and demonstrations. It exposes a /cmd?input= endpoint that executes arbitrary shell commands via os.system(), simulating a remote code execution (RCE) flaw.

🔒 Warning: This image is for educational and testing purposes only. It is not safe for production use. Do not expose this container to the internet or run it in shared environments.

🧪 Use cases include:

Testing admission controllers

Demonstrating runtime enforcement tools

Modeling container breakout and exfiltration paths

Tags: root, nonroot — use to test different container privilege levels.