botb

Break out the Box BOtB BOtB는 침투 테스터와 엔지니어가 사용할 수 있도록 설계된 컨테이너 분석 및 익스플로잇 도구이며, 일반적인 CI/CD 기술과도 호환됩니다. 어떤 기능을 하나요? BOtB는 다음과 같은 작업을 수행할 수 있는 CLI 도구입니다: 일반적인 컨테이너 취약점 익스플로잇 일반적인 컨테이너 사후 침투 작업 수행 컨테이너 내에서 특정 도구나 바이너리를 사용할 수 없을 때 기능 제공 CI/CD 기술과 함께 BOtB의 기능을 사용하여 컨테이너 배포 테스트 위 작업을 수동 또는 자동 방식으로 수행 현재...

CVE-2021-34824

Воспроизведение CVE-2021-34824 Воспроизведение старой ошибки Istio Этот набор скриптов и манифестов поможет в изучении старой проблемы безопасности Istio, которая позволяла злонамеренным пользователям Istio получать доступ к секретам Kubernetes, к которым у них не должно быть доступа. Данное...

Malicious code in @hrmony/account-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b699bc4a206505ba0cf224888996e37fe00dff5ffb737e3b95b9fd139b910f The main module executes on require/import via a top-level await. It queries the AWS IMDSv2 metadata service at 169.254.169.254 to retrieve instance...

Malicious code in @hrmony/interfaces (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7837cf2dff543cfea2f35e0dea5f767ca7b8e8f81129f4c770e5693ed247c0e index.js executes top-level async code on any require/import of the package. The code 1 obtains an AWS IMDSv2 token and fetches EC2 instance identity...

Malicious code in @hrmony/pladddform-application (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6470f9f3652c9b3b65d783ca46babc5ccf24e0d8d044ca654260168e8f881e17 On module load, the package's main entry point executes three exfiltration routines that POST installer-side secrets to the hardcoded endpoint...

Malicious code in @hrmony/middlewares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2129e9ecca729ffb0ac23ee07dd5be18f2a853560899599981bc92b19dda4363 On module load, the package queries the AWS instance metadata service at 169.254.169.254 IMDSv2 to enumerate instance identity, region, and network...

Malicious code in @hrmony/component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93efe09ed89a9899669e54f614f80d91a80c59d77e0c2a2f673f92590488804 index.js declared as the package main runs top-level async code on require/import that performs three exfiltration actions against a hardcoded attack...

Malicious code in @hrmony/pladddform-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de81847796671c2a5e9f97a94fae50352b0dff0816e4f0a7dfaf707fbb92629 index.js executes at module top level on require/import. It performs an unconditional POST check-in to...

Malicious code in @hrmony/pladddform-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b9c27ba35a6978a0731d77b7d5fec367f4c2a8b4acc5838588071c89886fa4 On require/import, index.js performs three attacker-benefiting actions against a hardcoded endpoint at https://hrnmn.dd.h4x.tv/. First, it POSTs an...

MAL-2026-17272 Malicious code in @hrmony/pladddform-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b9c27ba35a6978a0731d77b7d5fec367f4c2a8b4acc5838588071c89886fa4 On require/import, index.js performs three attacker-benefiting actions against a hardcoded endpoint at https://hrnmn.dd.h4x.tv/. First, it POSTs an...

Malicious code in @hrmony/pladddform-shared-infrastructure (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89319d39ad6d753459be90c221d657a73f70955c63d1675b347c11b5743209cc On module import, index.js executes three exfiltration routines that POST harvested secrets to the hardcoded endpoint...

Malicious code in @hrmony/pladddform-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607004ff93f1fcd5fbf7b1cf6b5e104b7f26eb699aee3dd4f8bbb33494f0b096 On module import, index.js executes an unconditional exfiltration payload against the installer/runtime host. It queries the AWS EC2 Instance Metadat...

Malicious code in @hrmony/lohndateien (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743e2b2a4a3cf2758e6eb457dbc47857751d31379b13a48a2da25fc23f8e9701 index.js executes on module load and performs three attacker-beneficial actions against a hardcoded remote endpoint at...

Malicious code in @hrmony/pladddform-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e61c4d5d499198c568d9f255e23b407eb7e47f7272c76bf5f50a0d0db31605 On top-level module load, index.js queries the AWS instance metadata service at 169.254.169.254 IMDSv2, retrieves the instance identity document,...

POC_CVE-2026-42880

CVE-2026-42880 — Раскрытие секретов ArgoCD через ServerSideDiff Лабораторная среда для воспроизведения и обнаружения CVE-2026-42880 — критической уязвимости в Argo CD, при которой gRPC-обработчик ServerSideDiff раскрывает данные секретов Kubernetes пользователям с доступом только на чтение. Обзор...

CVE-2025-15613

A flaw was found in Kyverno. An attacker with permissions to create Kyverno policies can exploit a Server-Side Request Forgery SSRF vulnerability within its Service Call functionality. This allows the attacker to specify an external URL in a policy's configuration, causing Kyverno to send request...

CVE-2026-86332

A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service account and returns the full Secret object, including .data, without an authorization check. Any authenticated dashboard...

EUVD-2026-72304

A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service account and returns the full Secret object, including .data, without an authorization check. Any authenticated dashboard...

CVE-2026-86332

A flaw in the odh-dashboard component of Red Hat OpenShift AI allows any authenticated dashboard user to read Kubernetes Secrets without an authorization check. The backend-for-frontend route GET /api/nim-serving/:nimResource uses the dashboard service account to retrieve and return the full Secr...

CVE-2026-86332

A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service account and returns the full Secret object, including .data, without an authorization check. Any authenticated dashboard...