exploit

Jul 31, 2022

Changes in this version

+ func CheckDebugfs() bool — linux/amd64

+ func ExploitLXCFSCgroup() bool — linux/amd64

+ func FindDir(path string) string — linux/amd64

+ func FindReleaseAgentSubSystem() string — linux/amd64

+ func IsDir(path string) bool — linux/amd64

Jul 10, 2022

Changes in this version

+ type KubeletExec struct

+ func (p KubeletExec) Desc() string

+ func (p KubeletExec) Run() bool

+ type VarLogEscape struct

+ func (p VarLogEscape) Desc() string

+ func (p VarLogEscape) Run() bool

Jun 24, 2022

Changes in this version

+ type EtcdGetToken struct

+ func (p EtcdGetToken) Desc() string

+ func (p EtcdGetToken) Run() bool

Mar 10, 2022

Changes in this version

+ const DefaultFolderPerm — linux/amd64

+ func UnprivUserNS(cmd string) error — linux/amd64

+ type ExploitUnprivUserNS struct — linux/amd64

+ func (exp ExploitUnprivUserNS) Desc() string

+ func (exp ExploitUnprivUserNS) Run() bool

Jun 27, 2021

Changes in this version

+ type RegistryBruteS struct

+ func (p RegistryBruteS) Desc() string

+ func (p RegistryBruteS) Run() bool

Jun 14, 2021

Changes in this version

+ func CapDacReadSearchExploit(target, ref string) error — linux/amd64

+ type CapDacReadSearch struct — linux/amd64

+ func (p CapDacReadSearch) Desc() string

+ func (p CapDacReadSearch) Run() bool

Apr 14, 2021

Changes in this version

+ func DeployBackdoorDaemonset(serverAddr string, tokenPath string, image string, inputArgs string, ...) bool

+ func DockerSockExploit(sock string, cmd string) bool

+ func ExploitLXCFS() bool

+ func GetK8sSATokenViaCreatePod(tokenPath string, targetServiceAccount string, rhost string, rport string) error

+ type K8SPodSecurityPolicy struct

+ func (p K8SPodSecurityPolicy) Desc() string

+ func (p K8SPodSecurityPolicy) Run() bool

+ type K8sGetSATokenViaCreatePodS struct

+ func (p K8sGetSATokenViaCreatePodS) Desc() string

+ func (p K8sGetSATokenViaCreatePodS) Run() bool

Feb 8, 2021

Changes in this version

+ func CheckDockerRemoteAPI(url string) bool

+ func DockerRemoteAPIExploit(api string, cmd string)

+ type DockerRemoteAPIS struct

+ func (p DockerRemoteAPIS) Desc() string

+ func (p DockerRemoteAPIS) Run() bool

Jan 29, 2021

Changes in this version

+ var K8sDeploymentsAPI = "/apis/apps/v1/namespaces/default/deployments"

+ var K8sMitmPayloadDeploy = ...

+ var K8sMitmPayloadSvc = ...

+ var K8sServicesApi = "/api/v1/namespaces/default/services"

+ var MountCgroupCmd = ...

+ func AllDiskMount() (error, []string)

+ func CheckDockerSock(path string)

+ func CheckFdisk()

+ func CheckPidInject() bool

+ func ContainerdPwn(shellCmd string, rhost string, rport string) error

+ func DockerAPIPull(path string, image string)

+ func DockerAPIRun(path string, image string)

+ func EscapeCgroup(cmd string) error

+ func GetDockerAbsPath() string

+ func GetNamespaces(serverAddr string) string

+ func GetNodes(serverAddr string) string

+ func MountToRandomTarget(device string) (error, string)

+ func ProcfsExploit(procDir string, shellPayload string)

+ func ReverseShell(connectString string)

+ func SearchLocalFileText(StartDir string)

+ type DINDAttackDeployS struct

+ func (p DINDAttackDeployS) Desc() string

+ func (p DINDAttackDeployS) Run() bool

+ type DINDAttackS struct

+ func (p DINDAttackS) Desc() string

+ func (p DINDAttackS) Run() bool

+ type Event interface

+ type ExploitCgroupS struct

+ func (p ExploitCgroupS) Desc() string

+ func (p ExploitCgroupS) Run() bool

+ type FileScanS struct

+ func (p FileScanS) Desc() string

+ func (p FileScanS) Run() bool

+ type K8sBackDoorDaemonsetS struct

+ func (p K8sBackDoorDaemonsetS) Desc() string

+ func (p K8sBackDoorDaemonsetS) Run() bool

+ type K8sCronJobDeployS struct

+ func (p K8sCronJobDeployS) Desc() string

+ func (p K8sCronJobDeployS) Run() bool

+ type K8sMitmClusteripS struct

+ func (p K8sMitmClusteripS) Desc() string

+ func (p K8sMitmClusteripS) Run() bool

+ type K8sSecretsDumpS struct

+ func (p K8sSecretsDumpS) Desc() string

+ func (p K8sSecretsDumpS) Run() bool

+ type K8sShadowApiServerS struct

+ func (p K8sShadowApiServerS) Desc() string

+ func (p K8sShadowApiServerS) Run() bool

+ type PidInject struct

+ func (p PidInject) Desc() string

+ func (p PidInject) Run() bool

+ type TEST struct

+ func (p TEST) Desc() string

+ func (p TEST) Run() bool

+ type Tracee struct

+ func PtraceExec(name string, argv []string) (*Tracee, error)