POC-2020-8559

POC-2020-8559 استغلال لـ CVE-2020-8559. نقوم بسرقة جميع الاتصالات إلى kubelet باستخدام iptables ثم نعيد كتابة ردود 101 أو 302 إلى 307. الـ 101 مخصصة للإصدارات الحديثة من Kubernetes، بينما الـ 302 للإصدارات الأقدم. ليست لدينا صلاحية الوصول إلى شهادة x509 الخاصة بـ kube-apiserver، لذا يمكن أن يشكل...

POC-2020-8558

Visão Geral A CVE-2020-8558 é uma vulnerabilidade do Kubernetes que foi divulgada porque o kube-proxy inesperadamente disponibiliza serviços do host vinculados a localhost para outros na rede. Eu enfatizo o "inesperadamente" porque essa vulnerabilidade é decorrente de uma falha de design descuido...

kubernetes-client__java_CVE-2020-8570_client-java-parent-9_0_2_fixed

Client Java per Kubernetes Client Java per l'API di kubernetes. Versionamento del client Il client Java utilizza il Semantic Versioning. Incrementiamo il numero di versione major ogni volta che rigeneriamo il client per una nuova versione di Kubernetes vedi la tabella sotto. Ogni volta che lo...

fabric8io__kubernetes-client_CVE-2021-4178_5-0-2

Kubernetes & OpenShift Java Client Questo client fornisce accesso alle API REST complete di Kubernetes e OpenShift tramite un DSL fluente. kubernetes-client: kubernetes-model-core: openshift-client: knative-client: !Maven Centralhttps:...

CVE-2024-3094

CVE-2024-3094 Einfacher POC zum Testen der CVE-2024-3094-Sicherheitslücke in einem K8s-Cluster ❗ HAFTUNGSAUSSCHLUSS ❗ NUR ZU BILDUNGSZWECKEN – DER AUTOR ÜBERNIMMT KEINE HAFTUNG FÜR SCHÄDEN, DIE DURCH DIE NUTZUNG DIESER SOFTWARE ENTSTEHEN Beschreibung Wir werden einen verwundbaren Pod bereitstelle...

CVE-2018-1002105

CMPT733-Group110x90 CVE-2018-1002105 Membri : Abhishek Rungta, Shubham Saini, Siddhant Sood Configurazione dell'ambiente Una VM Linux ad esempio Ubuntu 20.04 Minikube per il deployment locale di Kubernetes Una qualsiasi di queste versioni precedenti 1.0.x— 1.9.x, 1.10.0—1.10.10, 1.11.0—1.11.4,...

IngressNightmare-POCs

IngressNightmare-POCs CVE-2025-24513: https://github.com/kubernetes/kubernetes/issues/131005 CVE-2025-24514: https://github.com/kubernetes/kubernetes/issues/131006 CVE-2025-1097: https://github.com/kubernetes/kubernetes/issues/131007 CVE-2025-1098:...

kubetcd

Kubetcd Wrapper di https://github.com/jpbetz/auger. Automatizza il deployment dei pod scrivendo direttamente in etcd. Include diverse funzioni per la post-esplorazione di etcd compromessi. Avvertenza !WARNING Questa è una PoC, non utilizzarla in un ambiente di produzione. Scrivere direttamente in...

CVE-2021-34824

CVE-2021-34824 पुनरुत्पादन एक पुराने Istio बग का पुनरुत्पादन स्क्रिप्ट्स और मेनिफेस्ट्स का यह सेट एक पुराने Istio सुरक्षा मुद्दे का अन्वेषण करने में सहायता करेगा, जिसने दुर्भावनापूर्ण Istio उपयोगकर्ताओं को उन Kubernetes secrets तक पहुँचने की अनुमति दी, जिन तक उनकी पहुँच नहीं होनी चाहिए थी। यह...

CVE-2026-75889

Grafana Alloy’s prometheus.operator.servicemonitors component allows a user who can create or modify ServiceMonitor resources in a watched namespace to specify an arbitrary local file through bearerTokenFile. Alloy reads the file and sends its contents as a bearer token to an attacker-controlled...

POC-IngressNightmare-CVE-2025-1974

POC di IngressNightmare CVE-2025-1974 Sviluppato da: https://github.com/yoshino-s/CVE-2025-1974 https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Le parole sono a buon mercato, basta guardare il codice. I dettagli si trovano su...

martian-packets

Martian Packets Un repository contenente uno script Python che può essere utilizzato per creare pacchetti TCP/IP grezzi. Utilizzato per testare i pacchetti "martian" in seguito a una vulnerabilità annunciata in Kubernetes kube-proxy: CVE-2020-8558. Questa PoC copre il bypass del confine localhost...

silicon2022-capturetheflag

silicon2022-ctf Über Eine CTF mit 41 Flags, die auf der RootTheBox-Plattform basiert. Die Infrastruktur wurde größtenteils auf dem Azure Kubernetes Service bereitgestellt. Terminal-Challenges wurden über Docker-Images mit einer modifizierten Version von WeTTY bereitgestellt. Erstellen Die meisten...

externalip-webhook

externalip-webhook creato per affrontare CVE-2020-8554 Nota: Questo chart è deprecato per la versione di Kubernetes 1.21 e non supportato a partire dalla 1.22. Per mitigare CVE-2020-8554, abilita il controller di ammissione DenyServiceExternalIPs sul cluster. externalip-webhook è un webhook di...

CVE-2022-23648-POC

PoC per CVE-2022-23648 Questa è una prova di concetto per la CVE-2022-23648 di @fel1x. Informazioni sulla divulgazione qui, informazioni sulla CVE qui e un blog con ulteriori informazioni e idee di mitigazione qui. Il Containerfile contiene le informazioni necessarie e puoi cambiare la destinazio...

CVE-2024-7646

CVE-2024-7646 PoC CVE-2024-7646 root@kitploit: apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: example-ingress annotations: nginx.ingress.kubernetes.io/server-snippet: | addheader X-Pwn-Header "Pwn\r\n HTTP/1.1 200 OK Content-Type: text/html alert'XSS'; --------"; return 200 "PWNed...

CVE-2026-75889 CVE-2026-75889 CVE Record

Grafana Alloy’s prometheus.operator.servicemonitors component allows a user who can create or modify ServiceMonitor resources in a watched namespace to specify an arbitrary local file through bearerTokenFile. Alloy reads the file and sends its contents as a bearer token to an attacker-controlled...

CVE-2026-75889

Grafana Alloy's prometheus.operator.servicemonitors component is vulnerable to arbitrary local file disclosure via the bearerTokenFile field. A user with ServiceMonitor write access in a watched namespace can point this field at any file readable by the Alloy process; Alloy then sends the file's ...

EUVD-2026-67162

Grafana Alloy’s prometheus.operator.servicemonitors component allows a user who can create or modify ServiceMonitor resources in a watched namespace to specify an arbitrary local file through bearerTokenFile. Alloy reads the file and sends its contents as a bearer token to an attacker-controlled...

kubebox

= Kubebox small^⎈❏^ Antonin Stefanutti https://github.com/astefanutti@astefanutti // Meta :description: Terminal and Web console for Kubernetes // Settings :idprefix: :idseparator: - :experimental: // Aliases ifdef::env-github :note-caption: ℹ️ :icon-check: ✔️ :icon-edit: ✏️ endif::...