kubolt

Что? Kubolt — это простая утилита для сканирования общедоступных неаутентифицированных кластеров Kubernetes и выполнения команд внутри контейнеров Зачем? Иногда порт kubelet 10250 открыт для несанкционированного доступа, что позволяет запускать команды внутри контейнеров с помощью функции getrun ...

subpath-exploit

Échappement Kubernetes Exemple via CVE-2017-1002101 Description Après avoir entendu parler du problème et suivi ce guide, j'ai voulu explorer les choses un peu plus. Ce dépôt contient quelques déploiements de pods et des scripts shell d'assistance qui démontrent le mécanisme d'attaque de la maniè...

CVE-2020-10749

CVE-2020-10749 CVE-2020-10749 PoC IPv6 가짜 라우터 알림을 통한 Kubernetes MitM 공격 교육 목적으로만 사용하십시오. 요구사항 다음 kubelet 버전을 사용하는 Kubernetes 클러스터 kubelet v1.18.0-v1.18.3 kubelet v1.17.0-v1.17.6 kubelet mtu 1450 state UP inet6 fe80::3c07:afff:feb5:7219/64 scope link validlft forever preferredlft forever / ip -6...

CVE-2021-25741

소개 CVE-2021-25741 취약점을 위한 익스플로잇입니다. 이 취약점은 Node 파일시스템을 읽기-쓰기 권한으로 새 POD 내부에 마운트할 수 있게 합니다. 취약점에 대한 자세한 내용은 여기에서 확인할 수 있습니다: https://security.googleblog.com/2021/12/exploring-container-security-storage.html 저는 이 취약점의 작성자가 아니며 단지 익스플로잇을 만들었을 뿐입니다. 익스플로잇 개발에 도움을 주신 @russtone 및 @maximusfox 님께 감사드립니다...

kubolt

Wat? Kubolt is simple utility for scanning public unauthinticated kubernetes clusters and run commands inside containers Why? Sometimes, the kubelet port 10250 is open to unauthorized access and makes it possible to run commands inside the containers using getrun function from kubelet:...

CVE-2020-8559

Kubernetes CVE-2020-8559 개념 증명 PoC 익스플로잇 이것은 데모 목적으로만 사용됩니다. 관리 작업을 수행할 권한이 있고 CVE-2020-8559을 악용할 권한이 있는 시스템에서만 사용하십시오. 이것은 CVE-2020-8559에 대한 PoC입니다. 이 취약점은 공격자가 노드에서 root를 획득한 경우 클러스터의 다른 컨테이너에서 명령을 실행할 수 있게 하여 Kubernetes 마스터 노드를 장악할 수 있게 합니다. 이 취약점은 Kubernetes API 서버와 kubectl 명령이 HTTP 리디렉션을 따르는...

POC-2020-8559

POC-2020-8559 CVE-2020-8559용 익스플로잇입니다. iptables를 사용하여 kubelet에 대한 모든 연결을 가로챈 다음 101 또는 302 응답을 307로 다시 작성합니다. 101은 최신 Kubernetes 버전용이고, 302는 이전 버전용입니다. 우리는 kube-apiserver의 x509 인증서에 접근할 수 없으므로 kubelet webhook 인증이 문제가 될 수 있습니다. 이 kubelet 구성 조각을 사용하면 문제가 없습니다. 기본적으로 이전의 kubelet 익스플로잇을 다시 활성화합니다:...

CVE-2022-23648-POC

Preuve de concept pour CVE-2022-23648 Ceci est une preuve de concept pour le CVE-2022-23648 de @fel1x. Informations de divulgation ici, informations sur le CVE ici et un blog avec plus d'informations et des idées de mitigation ici. Le Containerfile contient les informations nécessaires, et vous...

cve-2024-10220-test

Dépôt de test pour CVE-2024-10220 Ce dépôt est utilisé pour tester la CVE-2024-10220 vulnérabilité du volume gitRepo de Kubernetes dans le cadre de la recherche en sécurité HPC à l'Université de Central Oklahoma. AVERTISSEMENT: Ce dépôt contient un hook Git malveillant destiné à des tests de...

CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability

CVE-2024-10220 - Vulnérabilité du volume gitRepo Kubernetes Par Mark Mallia Conteneurisation et la puissance de l'automatisation La conteneurisation est la colonne vertébrale de la livraison moderne d'applications : elle regroupe une pile d'exécution complète dans une image unique et immuable qui...

ZigRaceExploit

CVE-2021-25741 — Exploit di race condition TOCTOU sui symlink in Zig Exploit didattico della race condition TOCTOU Time Of Check, Time Of Use all'origine di CVE-2021-25741, una vulnerabilità nel kubelet di Kubernetes. Il progetto dimostra localmente senza cluster K8s come uno swap concorrente di...

GO-2023-2045 vulnerabilities

Vulnerabilities for packages: metrics-server...

Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code

A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Servi...

Important: Red Hat Security Advisory: Red Hat build of MicroShift 4.19.42 security update

Red Hat build of MicroShift release 4.19.42 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

RHCOS 4 : Red Hat build of MicroShift 4.19.42 (RHSA-2026:51422)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:51422 advisory. - Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code CVE-2026-35469 Note that Nessus...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.56 security and extras update

Red Hat OpenShift Container Platform release 4.17.56 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a security impact of...

Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code

A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Servi...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.29 security and extras update

Red Hat OpenShift Container Platform release 4.20.29 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.24 security and extras update

Red Hat OpenShift Container Platform release 4.21.24 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...

Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code

A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Servi...