chaoskube

chaoskube chaoskube 会定期在您的 Kubernetes 集群中杀死随机 Pod。 为什么 测试您的系统在任意 Pod 故障下的表现。 示例 默认情况下，运行它每 10 分钟会在任何命名空间中杀死一个 Pod。 root@kitploit: $ chaoskube INFO0000 starting up dryRun=true interval=10m0s version=v0.21.0 INFO0000 connecting to cluster master="https://kube.you.me" serverVersion=v1.10.5+coreos.0...

badPods

Bad Pods さまざまな昇格特権を持つポッドを作成するマニフェスト集です。hostNetwork、hostPID、hostPath、hostIPC、privileged などのセキュリティ上重要なポッド属性を許可した場合の影響をすばやく実証できます。 詳細な背景については、以下のブログ記事を参照してください: Bad Pods: Kubernetes Pod Privilege Escalation。 目次 Bad Pods のラインナップ 前提条件 リポジトリ構成 使用方法 ハイレベルな進め方 使用例 クローンしたローカルリポジトリから8つの Bad Pod をすべて作成する...

CVE-2024-31989

CVE-2024-31989 CVE-Exploit for Argo CD Argo CD の CVE エクスプロイト このリポジトリには、Argo CD においてパスワードなしでデプロイされた Redis インスタンスを標的とする CVE-2024-31989 のエクスプロイトが含まれています。 説明 Argo CD は、Kubernetes 向けの宣言型 GitOps 継続的デリバリーツールです。このエクスプロイトは、Argo CD において Redis インスタンスがパスワードなしでデプロイされる脆弱性を利用します。 インストール 1. リポジトリをクローンします:...

CVE-2018-1002105

CMPT733-Group110x90 CVE-2018-1002105 メンバー : Abhishek Rungta, Shubham Saini, Siddhant Sood 環境セットアップ Linux VM（例: Ubuntu 20.04） Kubernetesのローカルデプロイメント用のMinikube 以下のいずれかの旧バージョン（1.0.x— 1.9.x, 1.10.0—1.10.10, 1.11.0—1.11.4, 1.12.0—1.12.2） エクスプロイトの実行 仮想ボックスイメージ（.ovaファイル）を用意しました。 それをダウンロードして、VMを作成してください。...

CLEANSTART-2026-FH07251 Security fixes in vertical-pod-autoscaler 1.7.1-r2

Package vertical-pod-autoscaler version 1.7.1-r2 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CVE-2026-5556-Kubernetes-Admission-Controller-Bypass-via-Case-Sensitivity

CVE-2026-5556 – Kubernetes アドミッションコントローラーの大文字小文字の区別によるバイパス プログラムコード（Python アドミッションウェブフック＋エクスプロイト） root@kitploit: !/usr/bin/env python3 admissionwebhook.py - Vulnerable webhook that rejects pods with specific name from flask import Flask, request, jsonify app = Flaskname DENIEDPODNAMES =...

CVE-2026-40564

CVE-2026-40564: flink-kubernetes-operator における FlinkSessionJob.spec.job.jarURI 経由の SSRF Apache Flink Kubernetes Operator は、FlinkSessionJobまたは FlinkDeploymentリソース上の spec.job.jarURI フィールドをチェックしません。これらのリソースを作成できる人は誰でも、jarURI を任意の URL に設定できます。Operator がリソースを調整reconcileする際、自身の Pod 内部からその URL...

CVE-2024-3094

CVE-2024-3094 POC di base per testare la vulnerabilità CVE-2024-3094 all'interno di un cluster K8s ❗ DISCLAIMER ❗ UTILIZZARE SOLO PER SCOPI EDUCATIVI. L'AUTORE NON È RESPONSABILE DI QUALSIASI DANNO CAUSATO DALL'USO DI QUESTO SOFTWARE Descrizione Distribuiremo un pod vulnerabile e lo sfrutteremo p...

CVE-2026-21008-Kubernetes-Service-Account-Token-Mounted-in-HostPath

CVE-2026-21008 – Token dell'account di servizio Kubernetes montato in HostPath Codice del programma YAML + exploit Python root@kitploit: vulnerable-pod.yaml - Pod that mounts /var/run/secrets/kubernetes.io/serviceaccount into a hostPath apiVersion: v1 kind: Pod metadata: name: sa-token-leak spec:...

kubetcd

Kubetcd Wrapper di https://github.com/jpbetz/auger. Automatizza il deployment dei pod scrivendo direttamente in etcd. Include diverse funzioni per la post-esplorazione di etcd compromessi. Avvertenza !WARNING Questa è una PoC, non utilizzarla in un ambiente di produzione. Scrivere direttamente in...

Oracle Business Intelligence Enterprise Edition (OAS 26.01) (August 2026 CSPU)

The version of Oracle Business Intelligence Enterprise Edition OAS 26.01.0.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API...

Oracle Business Intelligence Enterprise Edition (OAS 8.2) (August 2026 CSPU)

The version of Oracle Business Intelligence Enterprise Edition OAS 8.2.0.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API...

webhook-cve-2022-0811

webhook-cve-2022-0811 Questo è un webhook molto semplice che blocca la creazione di pod se vengono configurati valori sysctl dannosi. Compilazione root@kitploit: go test CGOENABLED=0 GOOS=linux GOARCH=amd64 GO111MODULE=on go build Creare l'immagine e distribuire in Minikube Avvia minikube:...

CVE-2026-18544

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

EUVD-2026-62851

IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...

PT-2026-78689

Name of the Vulnerable Software and Affected Versions IBM Portieris versions 0.5.0 through 0.14.2 Description Improper authorization of pod owner references allows a remote authenticated attacker to bypass image policy enforcement. Recommendations Update IBM Portieris to a version later than 0.14...

CVE-2026-61302

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Pod Admin. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

EUVD-2026-61362

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Pod Admin. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2026-77518

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 26.01.0.0.0.0 Description An issue in the Pod Admin component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

CVE-2026-71472

The flaw resides in postgresql-start.sh within the search-v2-operator of acm-search-v2-rhel9. The WORK_MEM string supplied via a Search Custom Resource is passed unvalidated into both a bash script and an SQL query, enabling authenticated hub administrators or CR editors to inject shell commands ...