mesh-kridik

mesh-kridik Melhore a segurança do seu service mesh Kubernetes !! mesh-kridik é um verificador de segurança de código aberto que realiza várias verificações de segurança em um cluster Kubernetes com service mesh Istio e gera um relatório de segurança. As verificações de segurança são a...

HAProxy-Keepalived-Sec-HighLoads

Installazione e Configurazione di HAProxy e Keepalived LoadBalancer+Cluster+Sec+HighLoads HAProxy è un software open source che fornisce un servizio proxy per applicazioni TCP e HTTP con bilanciamento del carico ad alta disponibilità. Keepalived è un software open source in grado di fornire la...

munge

MUNGE Uid 'N' Gid Emporium MUNGE MUNGE Uid 'N' Gid Emporium è un servizio di autenticazione per creare e validare le credenziali degli utenti. È progettato per essere altamente scalabile per l'uso in ambienti cluster HPC. Fornisce un'API portabile per codificare l'identità dell'utente in una...

cluster-image-scanner

ClusterImageScanner Entdecken Sie Schwachstellen und Fehlkonfigurationen von Container-Images in Produktionsumgebungen. Einführung Der ClusterImageScanner erkennt Images in einem Kubernetes-Cluster und liefert schnelles Feedback basierend auf verschiedenen Sicherheitstests. Es wird empfohlen, den...

CVE-2025-1974

CVE-2025-1974 — IngressNightmare ingress-nginx परिचय यह दस्तावेज़ Kubernetes के लिए ingress-nginx घटक validating admission controller को प्रभावित करने वाली भेद्यता CVE-2025-1974 के शोध को प्रस्तुत करता है। CVE-2025-1974 एक गंभीर भेद्यता CVSS 3.1 9.8 है, जो ingress-nginx प्रक्रिया के संदर्भ में एक...

prowler

Prowler Prowler è uno scanner di vulnerabilità di rete implementato su un cluster di Raspberry Pi, sviluppato inizialmente durante l'Hackathon della Comunità di Sicurezza Informatica di Singapore - HackSmith v1.0. Capacità Scansionare una rete una particolare sottorete o un elenco di indirizzi IP...

Kubestroyer

Kubestroyer Kubestroyer zielt darauf ab, Fehlkonfigurationen von Kubernetes-Clustern auszunutzen und das Schweizer Taschenmesser für Ihre Kubernetes-Pentests zu sein. ·...

CVE-2017-3881-exploit-cisco-

Une vulnérabilité dans le code de traitement du protocole Cisco Cluster Management Protocol CMP dans les logiciels Cisco IOS et Cisco IOS XE pourrait permettre à un attaquant distant non authentifié de provoquer un rechargement d'un appareil concerné ou d'exécuter du code à distance avec des...

permission-manager

Permission manager Welcome to the Permission Manager! 🎉 🎉 Permission Manager is an application developed by SIGHUP that enables a super-easy and user-friendly RBAC management for Kubernetes. If you are looking for a simple and intuitive way of managing your users within a Kubernetes cluster, this...

IngressNightmare-PoC

Exploit for Ingress NGINX - IngressNightmare Questo progetto fornisce un exploit che mira a vulnerabilità critiche di Remote Code Execution RCE non autenticata nel controller Ingress NGINX per Kubernetes, note collettivamente come IngressNightmare. Ricerca di Wiz Nella ricerca originale, il team ...

Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover

क्लस्टर-कैओस-शोषण-CVE-2025-59359-द्वारा-कुबेरनेटीस-अधिग्रहण CVE-2025-59359 का एक व्यावहारिक फोरेंसिक वॉकथ्रू, जो Chaos-Mesh में एक गंभीर OS कमांड इंजेक्शन दोष है। जानें कि कैसे हमलावर GraphQL म्यूटेशन के माध्यम से कुबेरनेटीस क्लस्टर को हाईजैक करते हैं, और ELK का उपयोग करके उल्लंघन का पता कैसे...

Kubernetes-1.12.3-all-auto-install

Kubernetes-1.12.3-all-auto-install Projektbeschreibung Persönlich zusammengestellte Dateien für die vollautomatische, schnelle Ein-Klick-Installation von Centos7.x + Kubernetes-1.12.3 + Dashboard-1.8.3 ohne CVE-2018-1002105-Schwachstelle auf Master- und Node-Knoten. Geeignet für Testumgebungen un...

CVE-2023-28432_docker

CVE-2023-28432docker Ambienti di test per CVE-2023-28432, divulgazione di informazioni nei cluster MinIO. Le directory forniscono diverse versioni / configurazioni per un cluster MinIO:...

Cluster Control CMON API - Directory Traversal

Directory Traversal vulnerability in Severalnines Cluster Control 1.9.8 before 1.9.8-9778, 2.0.0 before 2.0.0-9779, and 2.1.0 before 2.1.0-9780 allows a remote attacker to include and display file content in an HTTP request via the CMON API. id: CVE-2024-41628 info: name: Cluster Control CMON API...

KubePi JwtSigKey - Admin Authentication Bypass

KubePi is a k8s panel. The jwt authentication function of KubePi through version 1.6.2 uses hard-coded Jwtsigkeys, resulting in the same Jwtsigkeys for all online projects. This means that an attacker can forge any jwt token to take over the administrator account of any online project. Furthermor...

MinIO Cluster Deployment - Information Disclosure

MinIO is susceptible to information disclosure. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including MINIOSECRETKEY and MINIOROOTPASSWORD. An attacker can potentially obtain sensitive...

kube-alien

Kube-alien This tool launches attack on k8s cluster from within. That means you already need to have an access with permission to deploy pods in a cluster to run it. After running the kube-alien pod it tries to takeover cluster's nodes by adding your public key to node's /root/.ssh/authorizedkeys...

golismero

What's GoLismero? GoLismero is an open source framework for security testing. It's currently geared towards web security, but it can easily be expanded to other kinds of scans. The most interesting features of the framework are: Real platform independence. Tested on Windows, Linux, BSD and OS X. ...

prowler

Prowler Prowler is a Network Vulnerability Scanner implemented on a Raspberry Pi Cluster, first developed during Singapore Infosec Community Hackathon - HackSmith v1.0. Capabilities Scan a network a particular subnet or a list of IP addresses for all IP addresses associated with active network...

Important: Red Hat Security Advisory: RHACS 4.11.3 security and bug fix update

Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...