818 matches found
trustlock
trustlock ไธไธชๅ็้ๆ็ Git ไพ่ตๅๅ ฅๆงๅถๅจใๅจๆฏๆฌกไพ่ตๅๆดๆถ่ฏไผฐไฟกไปปไฟกๅทใ ๅทฅไฝๅ็ trustlock ไฝไธบ Git ้ขๆไบค้ฉๅญ ๏ผๅปบ่ฎฎๆจกๅผ๏ผๅ CI ๆฃๆฅ ๏ผๅผบๅถๆจกๅผ๏ผ่ฟ่ก๏ผ ๅปบ่ฎฎๆจกๅผ๏ผ้ขๆไบค๏ผ๏ผ ๅฏน่ฟ่งๅๅบ่ญฆๅ๏ผ้ๅบ็ ไธบ 0๏ผๅฝๆๆๅ ๅ่ขซๅๅ ฅๆถๆจ่ฟไฟกไปปๅบ็บฟใ ๅผบๅถๆจกๅผ๏ผ--enforce๏ผ๏ผ ้ปๆญข่ฟ่ง๏ผ้ๅบ็ ไธบ 1๏ผๆฐธไธๆจ่ฟๅบ็บฟใ ๆฏไธชๅ ่ฏไผฐ็ไฟกไปปไฟกๅท๏ผ ๅทๅดๆ โ ็ๆฌๅๅธๅฐๆณจๅ่กจๅ็ป่ฟ็ๆถ้ด ๆฅๆบ่ฏๆ โ ๅ ๆฏๅฆๅ ทๆ SLSA ่ฏๆ ็ๆฌๅบๅฎ โ ้ๅฎๆไปถๆฏๅฆไฝฟ็จ็ฒพ็กฎ็ๆฌ ๅฎ่ฃ ่ๆฌ โ ๅ ๆฏๅฆ่ฟ่กๅฎ่ฃ ๆถ่ๆฌ ๆฅๆบ โ ๅ ๆฅ่ชๆณจๅ่กจใGit URLใๆฌๅฐ่ทฏๅพ่ฟๆฏ...
CVE-2021-25735
CVE-2021-25735 ๅฉ็จCVE-2021-25735๏ผ็ป่ฟKubernetes้ช่ฏๅๅ ฅWebhook ่ฎพ็ฝฎ่ๅผฑ็ฏๅข ่ฎฉๆไปฌๅ ่ฟ่ก่ๆฌgencerts.sh็ๆTLS่ฏไนฆๅๅฏ้ฅใ bash gencerts.sh ่ฆ้จ็ฝฒๅๅ ฅๆงๅถๅจ๏ผไฝ ้่ฆๆฌๅฐๆๅปบDockerๅฎนๅจ้ๅ๏ผๆๆ ็ญพ๏ผๅนถไฝฟ็จไปฅไธๅฝไปคๅฐ้ๅๆจ้ๅฐไฝ ็Dockerhubใ docker login docker build -t validationwebhook:1.0 . docker tag validationwebhook:1.0 darryk/dev:1.0 docker push darryk/dev:1.0...
CVE-2025-1974
Kubernetes Ingress-NGINX ๆช่ฎค่ฏ่ฟ็จไปฃ็ ๆง่กCVE-2025-1974 Ingress-NGINX: ไฝฟ็จNGINXไฝไธบๅๅไปฃ็ๅ่ด่ฝฝๅ่กกๅจ็Kubernetes ingressๆงๅถๅจ "IngressNightmare"ๆผๆดCVE-2025-1974ๆบไบIngress-NGINX Admission Controller็่ดๅฝ็ผบ้ท๏ผ่ฏฅๆงๅถๅจๆฏKubernetes็จไบ้ช่ฏไผ ๅ ฅIngress่ตๆบ็ๆ ธๅฟๅฎๅ จๆบๅถใ ่ฏฅๆงๅถๅจๅจๆฒกๆ่ฎค่ฏ็ๆ ๅตไธๆด้ฒไบ็ฝ็ป๏ผไฝฟๆปๅป่ ่ฝๅคๆ็บตๆถๆ็AdmissionReview่ฏทๆฑ๏ผๅนถๅจIngress่ตๆบไธญๆๅ ฅๆชๆๆ็้ ็ฝฎใ...
IngressNightmare-RCE-POC
โ ๏ธ Critical RCE in Ingress-NGINX via Configuration Injection CVE-2025-1974 and more ๆญคไปๅบๅ ๅซ้ๅฏน CVE-2025-1974 ็ๆฆๅฟต้ช่ฏ๏ผPoC๏ผๅฉ็จ็จๅบ๏ผ่ฟๆฏ Kubernetes ็ Ingress-NGINX ๆงๅถๅจไธญ็ไธไธชไธฅ้๏ผCVSS 9.8 ๏ผๆผๆดใ่ฏฅๆผๆดๅ ่ฎธๆช็ป่บซไปฝ้ช่ฏ็ๆปๅป่ ้่ฟไฝฟ็จ Validating Admission Controller ๆถไธๅฎๅ จ็้ ็ฝฎๆณจๅ ฅๅฎ็ฐ่ฟ็จไปฃ็ ๆง่กใ่ฟๆฏ 2025 ๅนด 3 ๆ 26 ๆฅๆซ้ฒๅนถไฟฎๅค็ไบ้กนๆผๆดไธญๆไธฅ้็ไธไธชใ ๐ ๅฝฑๅ๏ผ โข...
polaris
Polaris ๆฏ Kubernetes ็ไธไธชๅผๆบ็ญ็ฅๅผๆ Polaris ๆฏ Kubernetes ็ไธไธชๅผๆบ็ญ็ฅๅผๆ๏ผ็จไบ้ช่ฏๅไฟฎๅค่ตๆบ้ ็ฝฎใๅฎๅ ๅซ 30 ๅคไธชๅ ็ฝฎ้ ็ฝฎ็ญ็ฅ๏ผๅนถๆฏๆไฝฟ็จ JSON Schema ๆๅปบ่ชๅฎไน็ญ็ฅใๅฝไปฅๅฝไปค่กๆจกๅผๆไฝไธบ็ชๅ Webhook ่ฟ่กๆถ๏ผPolaris ่ฝๅคๆ นๆฎ็ญ็ฅๆ ๅ่ชๅจไฟฎๅค้ฎ้ขใ Polaris ๅฏไปฅๅจไธ็งไธๅๆจกๅผไธ่ฟ่ก๏ผ ไฝไธบไปช่กจ็ - ๆ นๆฎ็ญ็ฅๅณไปฃ็ ้ช่ฏ Kubernetes ่ตๆบใ ไฝไธบๅๅ ฅๆงๅถๅจ - ่ชๅจๆ็ปๆไฟฎๆนไธ็ฌฆๅ็ป็ป็ญ็ฅ็ๅทฅไฝ่ด่ฝฝใ ไฝไธบๅฝไปค่กๅทฅๅ ท - ๅฐ็ญ็ฅๅณไปฃ็ ้ๆๅฐ CI/CD ๆต็จไธญ๏ผ็จไบๆต่ฏๆฌๅฐ YAML ๆไปถใ...
CVE-2025-1974
CVE-2025-1974 ็ฝๅธฝๅญฆๆ ก็ฌฌไธๆ - ๊น์์ @salt318 https://github.com/salt318/vulhub ๆ่ฆ ็ฑไบKubernetesๆ ธๅฟๅฎๅ จๆบๅถIngress-NGINX Admission Controller็็ผบ้ทๅผๅ Ingress-NGINX Admission Controllerๆ ้่ฎค่ฏๅณๅฏๆด้ฒๅจ็ฝ็ปไธญ ่ฟไฝฟๅพๆปๅป่ ๅฏไปฅๆ้ ๆถๆ็AdmissionReview่ฏทๆฑ๏ผไป่ๅจIngress่ตๆบไธญๆๅ ฅๆช็ปๆๆ็้ ็ฝฎ ไธๅ ถไปๆผๆด็ปๅๆถๅฏ่ฝๅฎ็ฐ่ฟ็จไปฃ็ ๆง่ก๏ผCVE-2025-24514ใCVE-2025-1097ๆCVE-2025-1098๏ผ...
CVE-2025-1974
cve-2025-1974-win11-attack-defense-lab Windows 11 ไผๅ ็ๆ่ฒไปๅบ๏ผ็จไบๅจๅฎๅ จ็ใ้ๆญฆๅจๅ็ ATTACK + DEFENSE ๅฎ้ชๅฎค็ฏๅขไธญ็ ็ฉถ CVE-2025-1974ใ่ฏฅ้กน็ฎไธไธบๅคงๅญฆ่ฏพ็จใๅข้ๆผ็คบๅๅฏ็ๆๆฅๅ็ๆชๅพ่่ฎพ่ฎกใๅฎๅผบ่ฐๆธ ๆดๅฎคๅฎ็ฐใไป ๆฌๅฐ้ช่ฏ๏ผไปฅๅๆฐธไธๆไธบ็ๆญฃๆผๆดๅฉ็จ็็บข้ๅผๆปๅปไปฟ็ใ ่ฏฅๅฎ้ชๅฎค็ผ็ ไบๅฎๆนๅบ็บฟ๏ผๅณ CVE-2025-1974 ๅฝฑๅ ingress-nginx๏ผๅๅฝฑๅ็ๆฌไธบ Windows 11 ไผๅ ็ UX" -- B"Python CLIapp.main" B --...
CVE-2025-1974
ๆผ็คบ https://youtu.be/3hYlHeaf2mQ ไปไนๆฏ CVE-2025-1974๏ผ CVE-2025-1974 IngressNightmare ๆฏ Kubernetes ingress-nginx ๅๅ ฅๆงๅถๅจไธญ็ไธไธชไธฅ้๏ผCVSS 9.8๏ผๆชๆๆ่ฟ็จไปฃ็ ๆง่กๆผๆดใ ๆปๅปๆต็จ๏ผ 1. ไธไผ ๏ผ้่ฟ HTTP POST ๅ NGINX ๅ้ๆถๆๅ ฑไบซๅบ๏ผ.so ๆไปถ๏ผ 2. ๆณจๅ ฅ ๏ผๅ้็ฒพๅฟๆ้ ็ Ingress ็ธๅ ณๆธ ๅ๏ผAdmissionReview๏ผ๏ผๅนถๆบๅธฆๆณจๅ ฅ sslengine ๆไปค็ๆณจ่งฃ 3. ๆง่ก ๏ผๅๅ ฅๆงๅถๅจๆง่ก nginx -t๏ผ่ฏฅๅฝไปคๅ ่ฝฝๅนถๆง่กๆถๆ .s...
IngressNightmare-PoC
Exploit para Ingress NGINX - IngressNightmare Este proyecto proporciona un exploit dirigido a vulnerabilidades crรญticas de Ejecuciรณn Remota de Cรณdigo RCE no autenticada en el Controlador Ingress NGINX para Kubernetes, conocidas colectivamente como IngressNightmare. Investigaciรณn de Wiz En la...
CVE-2025-1974-poc
POC of IngressNightmare, RCE in Ingress NGINX CVE-2025-1974 Developed from: https://github.com/zwxxb/CVE-2025-1974/blob/main/poc.py https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilitieshow-did-we-discover-ingressnightmare-24 Thanks ไฝฟ็จ่ฏดๆ root@kitploit: forward the admission webhook...
Metasploit-Module-TFM
็จไบCVE-2023-2728ๅCVE-2024-3177็่ชๅฎไนMetasploitๆจกๅ ๆ่ฟฐ ๆญค่ชๅฎไนๆจกๅๅฉ็จไบKubernetesไธญๆๅCVE-2023-2728ๅCVE-2024-3177ๅฝฑๅ็็ๆฌ๏ผไพๅฆv1.27.2ๅๆถๅ่ฟไธคไธชๆผๆดๅฝฑๅ๏ผไธญ็ๆผๆด๏ผไธค่ ๅๆถๅ็ป่ฟKubernetesไธญServiceAccountๅๅ ฅๆไปถๆๆฝๅ ็ๅฏๆ่ฝฝๆบๅฏ็ญ็ฅ๏ผไฝไฝฟ็จไบไธๅ็ฑปๅ็ๅฎนๅจๅ็ญ็ฅใ ไธป่ฆ็ฎๆ ๆฏ่ทๅๆ้็ๆบๅฏ๏ผๅนถไปฅๅฏน็จๆทๅๅฅฝ็ๆนๅผๅจ็ฏๅขๅ้ไธญๅ็ฐใ ้ช่ฏๆญฅ้ชค ๅๅปบๆ่ทๅๅญๆฎ 1. ๅฏๅจmsfconsole 2. ๆง่ก๏ผuse...
CVE-2025-1974
๐จ Prueba de Inyecciรณn de Registros a travรฉs del Controlador de Admisiรณn de Ingress-NGINX ๐ง Resumen Este script prueba vulnerabilidades de inyecciรณn de anotaciones en clรบsteres de Kubernetes que utilizan el Controlador de Ingress NGINX. Estรก diseรฑado solo para fines de detecciรณn en relaciรณn con...
acp-framework-en
ACP โ Agent Control Protocol Admission control for agent actions. Before any agent mutates system state, ACP answers four questions: Who is this agent? What are they authorized to do? Is this action policy-compliant? Can the outcome be traced to an accountable institution? Cryptographic identity ...
CVE-2025-8471
CVE-2025-8471 SQLๆณจๅ ฅPoC ไฝ่ : Byte Reaper CVE : CVE-2025-8471 ๆผๆด : โprojectworlds Online Admission System v1.0โไธญ็SQLๆณจๅ ฅ ๆ่ฟฐ : adminlogin.php?aid=ๅญๅจ็ฒSQLๆณจๅ ฅใ่ฏฅPoCๅ้ไธ็ณปๅๆบๅธฆๅค็ง่ฝฝ่ท็GET่ฏทๆฑโโๅ ๆฌไธค้ถๆฎต่ฝฝ่ท๏ผINSERT โฆ UNION SELECT โฆใSLEEPใSELECT code โฆ๏ผๅโๆทฑๅบฆๆณจๅ ฅโๅญ็ฌฆไธฒโโ้่ฟๅๅบ้ฟๅบฆๅทฎๅผๆฅๆฃๆตๅๆไธพ่ฏฅ้ฎ้ขใ ไพ่ต GCC๏ผๆไปปไฝC็ผ่ฏๅจ๏ผ libcurlๅผๅๅคดๆไปถ argparse.h &...
trivy-enforcer
trivy-enforcer EXPERIMENTAL Operador de Kubernetes para el aseguramiento de imรกgenes Funciona como Controlador de admisiรณn Evita que se desplieguen imรกgenes inseguras Controlador personalizado Observa el CRD ImageVulnerability y escanea la imagen en el recurso personalizado automรกticamente...
ingressNightmare-CVE-2025-1974-exps
Ingress Nightmare CVE-2025-1907 ๆ่ฟฐ ๆญคๆผๆดๅ ่ฎธ่ฟ็จๆปๅป่ ๅจๅๅฝฑๅ็ kubernetes/ingress-nginx ๅฎ่ฃ ็ฏๅขไธๆง่กไปปๆไปฃ็ ใๅฉ็จๆญคๆผๆดๆ ้่บซไปฝ้ช่ฏใๅ ทไฝ็ผบ้ทๅญๅจไบๅฏน HTTP ่ฏทๆฑ็ๅค็่ฟ็จไธญใ ่ฏฅๆผๆด้่ฟๅ้ไธคไธช่ฏทๆฑ่งฆๅใ็ฌฌไธไธชๆฏๅ้ๅฐๅไธ Pod ไธญ NGINX ๆๅกๅจ็้ฟ็ผๅฒ่ฏทๆฑ๏ผ้ๅ nginx ไผๅฐๅ ถ็ผๅญไธบไธดๆถๆไปถใ็ฌฌไบไธช่ฏทๆฑๆฏๅ้ๅฐๅๅ ฅๆ ก้ช Webhook ๆๅกๅจ็่ฏทๆฑ๏ผ่ฟไผ่งฆๅๅๅ ฅ Webhook ๅๅ ฅไธไธชๅ ๅซ sslengine badsolocation; ๆไปค็ไธดๆถ nginx ้ ็ฝฎใ็ถๅๅๅ ฅ Webhook ไผ่ฟ่ก...
Online-Admission-System-RCE-PoC
Este repositorio no tiene un README...
CVE-2026-5556-Kubernetes-Admission-Controller-Bypass-via-Case-Sensitivity
CVE-2026-5556 โ Bypass del controlador de admisiรณn de Kubernetes mediante sensibilidad a mayรบsculas y minรบsculas Cรณdigo del programa webhook de admisiรณn en Python + exploit root@kitploit: !/usr/bin/env python3 admissionwebhook.py - Vulnerable webhook that rejects pods with specific name from flas...
CVE-2026-54523
A flaw was found in Kyverno, a policy engine for cloud-native platforms. A user with specific permissions to create policy objects in one area namespace can exploit a vulnerability where a namespace argument is not properly checked. This allows them to force the system's admission controller, whi...
SUSE CVE-2026-84196
Kyverno before 1.18.0 contains a server-side request forgery vulnerability in apiCall.service.url that allows authenticated users to send arbitrary HTTP requests by injecting user-controlled input through variable substitution. Attackers can target internal services, cloud metadata endpoints, and...