kube-scan

Kube-Scan Prueba hoy nuestra herramienta gratuita de evaluación de riesgos para Kubernetes. Ejecútala en cualquier clúster en cualquier momento. Ningún dato sale de tu clúster. No recopilamos ninguna información. Para más información sobre Octarine, visita https://www.octarinesec.com. Obtén la...

rip_raw

Rip Raw Rip Raw is a small tool to analyse the memory of compromised Linux systems. It is similar in purpose to Bulk Extractor, but particularly focused on extracting system Logs from memory dumps from Linux systems. This enables you to analyse systems without needing to generate a profile. This ...

kubeclarity

!IMPORTANT KubeClarity ha quedado obsoleto y ha sido sustituido por openclarity/openclarity. Consulte el comunicado de lanzamiento para obtener más información. Este proyecto no recibe actualizaciones. Le recomendamos migrar. KubeClarity es una herramienta para la detección y gestión de la lista ...

kubeaudit

Ahora es un requisito que los clústeres ejecuten Kubernetes =1.19. Las etiquetas de anulación con anotaciones kubernetes.io no registradas serán obsoletas. Pronto será un requisito usar kubeaudit.io en su lugar. Consulte esta discusión para obtener más contexto. 🚨 Aviso de desaprobación 🚨 Kubeaud...

CVE-2026-21008-Kubernetes-Service-Account-Token-Mounted-in-HostPath

CVE-2026-21008 – Kubernetes Service Account Token Mounted in HostPath Program Code YAML + Python exploit root@kitploit: vulnerable-pod.yaml - Pod that mounts /var/run/secrets/kubernetes.io/serviceaccount into a hostPath apiVersion: v1 kind: Pod metadata: name: sa-token-leak spec: containers: -...

text4shell-policy

Text4Shell Demo This demo shows how you can use Sigstore to validate your signed SBOMs against text4shell policies in Kubernetes or on the command line Option 1: Check if your remote OCI image is affected using cue with cosign 2.0 root@kitploit: cosign verify-attestation --policy...

kubernetes-log4j-cve-2021-44228-node-agent

!!!! AVISO DE OBSOLESCENCIA !!!! Este proyecto está siendo deprecado según se detalla a continuación. 2023-01-01 - Este repositorio ya no recibirá actualizaciones 2023-04-01 - Este repositorio será deprecado de forma permanente El proyecto dejará de aceptar incidencias y no se actualizará a parti...

cve-2018-1002105

CVE-2018-1002105 Utilidad de prueba que verifica si un clúster está afectado por la vulnerabilidad grave de Kubernetes publicada aquí. Un análisis para partes interesadas sobre CVE-2018-1002105 se encuentra en https://gravitational.com/blog/kubernetes-websocket-upgrade-security-vulnerability/...

webhook-cve-2022-0811

webhook-cve-2022-0811 This is a really simple webhook that just blocks pod creation if malicious sysctl values are configured. Build root@kitploit: go test CGOENABLED=0 GOOS=linux GOARCH=amd64 GO111MODULE=on go build Build image an deploy in Minikube Start minikube: root@kitploit: minikube start...

externalip-webhook

externalip-webhook creado para abordar CVE-2020-8554 Nota: Este chart está obsoleto para la versión 1.21 de Kubernetes y no es compatible a partir de 1.22. Para mitigar CVE-2020-8554, habilita el controlador de admisión DenyServiceExternalIPs en el clúster. externalip-webhook es un webhook de...

kubetcd

Kubetcd Wrapper of https://github.com/jpbetz/auger. It automates pod deployment by writing directly into etcd. It includes multiple functions for post-exploitation of compromised etcds. Disclaimer !WARNING This is a PoC, do not use it in a production environment. Writing directly to etcd may resu...

EUVD-2026-44774

Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.97 bug fix and security update

Red Hat OpenShift Container Platform release 4.12.97 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.19.2

cert-manager Operator for Red Hat OpenShift 1.19.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.19.2

cert-manager Operator for Red Hat OpenShift 1.19.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.97 security and extras update

Red Hat OpenShift Container Platform release 4.12.97 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a security impact of Low...

Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover

Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover A hands-on forensic walkthrough of CVE-2025-59359, a critical OS command injection flaw in Chaos-Mesh. Learn how attackers hijack Kubernetes clusters via GraphQL mutations, and how to detect, analyze, and report the breach using ELK...

kubernetes-client__java_CVE-2020-8570_client-java-parent-9_0_2_fixed

Kubernetes Java Client Java client for the kubernetes API. Client versioning The Java client uses Semantic Versioning. We increment the major version number whenever we regenerate the client for a new Kubernetes release version see table below. Whenever we do this there are new APIs added and...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.19.2

cert-manager Operator for Red Hat OpenShift 1.19.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.57 bug fix and security update

Red Hat OpenShift Container Platform release 4.17.57 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...