Skip to content
You must be logged in to sponsor liamromanis101

Become a sponsor to liamromanis101

@liamromanis101

liamromanis101

What I build

Practical, open-source security tools used by penetration testers and security teams:

K8s Container Escape Audit — a read-only bash auditor that runs inside a Docker/Kubernetes container and checks for escape vectors: 47 checks plus a config-driven CVE engine covering privileged config, dangerous capabilities, namespace and mount exposure, kernel hardening posture, Kubernetes/cloud misconfigurations, and recent container-escape CVEs.
CORS Testing Toolkit — goes beyond flagging weak headers to assess whether a CORS misconfiguration is actually exploitable (SameSite, credential rideability, data sensitivity, CSRF-token exposure), with an optional self-hosted testing service.
What your sponsorship funds
Keeping the CVE database current as new container-escape and kernel CVEs are disclosed
New checks and detections, and reducing false positives from real-world environments
Maintenance, documentation, and support for the tools
Commercial use

Both tools are free for non-commercial use under CC BY-NC 4.0. If you use them in a commercial engagement — as a consultant billing a client, or within a paid product or service — commercial-use rights are available through the commercial sponsorship tier below. Sponsorship doesn't affect the open licence for non-commercial users.

@liamromanis101

$200/month — enough to justify a regular cadence of CVE-database updates and new check coverage as container-escape vulnerabilities are disclosed. Do you need rapid updates for new vulnerabilities and escape methods? If you sponsor me I am happy to agree to a reasonable SLA.

Featured work

  1. Shell 26
  2. liamromanis101/DirtyFrag-Detector

    CVE-2026-43284/CVE-2026-43500 'DirtyFrag' Benign patch & mitigation detection script

    Python 15
  3. liamromanis101/K8s-container_escape_audit

    Look for possible escape vectors from a container

    Shell 9
  4. liamromanis101/M365-Scripts

    Collection of scripts for testing M365 subscriptions

    Python 5
  6. liamromanis101/cors-project

    an exploitability-aware CORS testing toolkit

    Python

Learn more about sponsoring developers and organizations.

Report abuse

0% towards $200 per month goal

Be the first to sponsor this goal!

Select a tier

$ a month

You'll receive any rewards listed in the $5 monthly tier. Additionally, a Public Sponsor achievement will be added to your profile.

$5 a month

Select

Support ongoing development and CVE-database upkeep. My thanks, and a good-karma boost for keeping these tools maintained.

$15 a month

Select

Everything above, plus your name (or handle) listed in the project's SPONSORS credits.

$50 a month

Select

Grants commercial-use rights under CC BY-NC 4.0 for one individual — e.g. a consultant using the tools in paid client assessments. Includes credits listing. Please reach out if you'd like an invoice or have questions about scope. Includes one exclusive urgent update per month with a 24hr turnaround for a new vulnerability or container escape method. The update remains exclusive to you until the next general release update.

$200 a month

Select

Commercial-use rights for a small team or organisation using the tools as part of commercial services or a paid product. Includes credits listing and a direct contact channel for questions. Get in touch to confirm team size and scope.
Includes three exclusive urgent updates per month with a 24hr turnaround for each new vulnerability or container escape method requested. The update remains exclusive to you until the next general release update.