exploit

Documentation

Index

• Variables
• func AllDiskMount() (error, []string)
• func CheckDockerRemoteAPI(url string) bool
• func CheckDockerSock(path string)
• func CheckFdisk()
• func CheckPidInject() bool
• func ContainerdPwn(shellCmd string, rhost string, rport string) error
• func DockerAPIPull(path string, image string)
• func DockerAPIRun(path string, cmd string)
• func DockerRemoteAPIExploit(api string, cmd string)
• func EscapeCgroup(cmd string) error
• func GetDockerAbsPath() string
• func GetNamespaces(serverAddr string) string
• func GetNodes(serverAddr string) string
• func MountToRandomTarget(device string) (error, string)
• func ProcfsExploit(procDir string, shellPayload string)
• func ReverseShell(connectString string)
• func SearchLocalFileText(StartDir string)
• type DINDAttackDeployS
  • func (p DINDAttackDeployS) Desc() string
  • func (p DINDAttackDeployS) Run() bool
• type DINDAttackS
  • func (p DINDAttackS) Desc() string
  • func (p DINDAttackS) Run() bool
• type DockerRemoteAPIS
  • func (p DockerRemoteAPIS) Desc() string
  • func (p DockerRemoteAPIS) Run() bool
• type ExploitCgroupS
  • func (p ExploitCgroupS) Desc() string
  • func (p ExploitCgroupS) Run() bool
• type FileScanS
  • func (p FileScanS) Desc() string
  • func (p FileScanS) Run() bool
• type K8sBackDoorDaemonsetS
  • func (p K8sBackDoorDaemonsetS) Desc() string
  • func (p K8sBackDoorDaemonsetS) Run() bool
• type K8sCronJobDeployS
  • func (p K8sCronJobDeployS) Desc() string
  • func (p K8sCronJobDeployS) Run() bool
• type K8sMitmClusteripS
  • func (p K8sMitmClusteripS) Desc() string
  • func (p K8sMitmClusteripS) Run() bool
• type K8sSecretsDumpS
  • func (p K8sSecretsDumpS) Desc() string
  • func (p K8sSecretsDumpS) Run() bool
• type K8sShadowApiServerS
  • func (p K8sShadowApiServerS) Desc() string
  • func (p K8sShadowApiServerS) Run() bool
• type PidInject
  • func (p PidInject) Desc() string
  • func (p PidInject) Run() bool
• type TEST
  • func (p TEST) Desc() string
  • func (p TEST) Run() bool

Variables

var K8sDeploymentsAPI = "/apis/apps/v1/namespaces/default/deployments"

var K8sMitmPayloadDeploy = `` /* 908-byte string literal not displayed */

var K8sMitmPayloadSvc = `` /* 447-byte string literal not displayed */

var K8sServicesApi = "/api/v1/namespaces/default/services"

var MountCgroupCmd = `` /* 135-byte string literal not displayed */

MountCgroupCmd remount a write-able devices cgroup subsystem

Functions

func AllDiskMount

func AllDiskMount() (error, []string)

print all device and mount them to random path under /tmp

func CheckDockerRemoteAPI

func CheckDockerRemoteAPI(url string) bool

func CheckDockerSock

func CheckDockerSock(path string)

APIs Ref https://github.com/AbsoZed/DockerPwn.py/blob/master/createContainer.py curl --unix-socket /var/run/docker.sock http://127.0.0.1/info

func CheckFdisk

func CheckFdisk()

add this to check if the container have device priv

func CheckPidInject

func CheckPidInject() bool

func ContainerdPwn

func ContainerdPwn(shellCmd string, rhost string, rport string) error

func DockerAPIPull

func DockerAPIPull(path string, image string)

func DockerAPIRun

func DockerAPIRun(path string, cmd string)

APIs Ref https://github.com/AbsoZed/DockerPwn.py/blob/master/createContainer.py curl --unix-socket /var/run/docker.sock http://127.0.0.1/info

func DockerRemoteAPIExploit

func DockerRemoteAPIExploit(api string, cmd string)

func EscapeCgroup

func EscapeCgroup(cmd string) error

func GetDockerAbsPath

func GetDockerAbsPath() string

func GetNamespaces

func GetNamespaces(serverAddr string) string

func GetNodes

func GetNodes(serverAddr string) string

func MountToRandomTarget

func MountToRandomTarget(device string) (error, string)

func ProcfsExploit

func ProcfsExploit(procDir string, shellPayload string)

func ReverseShell

func ReverseShell(connectString string)

func SearchLocalFileText

func SearchLocalFileText(StartDir string)

Types

type DINDAttackDeployS

type DINDAttackDeployS struct{}

plugin interface

func (DINDAttackDeployS) Desc

func (p DINDAttackDeployS) Desc() string

func (DINDAttackDeployS) Run

func (p DINDAttackDeployS) Run() bool

type DINDAttackS

type DINDAttackS struct{}

plugin interface

func (DINDAttackS) Desc

func (p DINDAttackS) Desc() string

func (DINDAttackS) Run

func (p DINDAttackS) Run() bool

type DockerRemoteAPIS

type DockerRemoteAPIS struct{}

plugin interface

func (DockerRemoteAPIS) Desc

func (p DockerRemoteAPIS) Desc() string

func (DockerRemoteAPIS) Run

func (p DockerRemoteAPIS) Run() bool

type ExploitCgroupS

type ExploitCgroupS struct{}

plugin interface

func (ExploitCgroupS) Desc

func (p ExploitCgroupS) Desc() string

func (ExploitCgroupS) Run

func (p ExploitCgroupS) Run() bool

type FileScanS

type FileScanS struct{}

plugin interface

func (FileScanS) Desc

func (p FileScanS) Desc() string

func (FileScanS) Run

func (p FileScanS) Run() bool

type K8sBackDoorDaemonsetS

type K8sBackDoorDaemonsetS struct{}

plugin interface

func (K8sBackDoorDaemonsetS) Desc

func (p K8sBackDoorDaemonsetS) Desc() string

func (K8sBackDoorDaemonsetS) Run

func (p K8sBackDoorDaemonsetS) Run() bool

type K8sCronJobDeployS

type K8sCronJobDeployS struct{}

plugin interface

func (K8sCronJobDeployS) Desc

func (p K8sCronJobDeployS) Desc() string

func (K8sCronJobDeployS) Run

func (p K8sCronJobDeployS) Run() bool

type K8sMitmClusteripS

type K8sMitmClusteripS struct{}

plugin interface

func (K8sMitmClusteripS) Desc

func (p K8sMitmClusteripS) Desc() string

func (K8sMitmClusteripS) Run

func (p K8sMitmClusteripS) Run() bool

type K8sSecretsDumpS

type K8sSecretsDumpS struct{}

plugin interface

func (K8sSecretsDumpS) Desc

func (p K8sSecretsDumpS) Desc() string

func (K8sSecretsDumpS) Run

func (p K8sSecretsDumpS) Run() bool

type K8sShadowApiServerS

type K8sShadowApiServerS struct{}

plugin interface

func (K8sShadowApiServerS) Desc

func (p K8sShadowApiServerS) Desc() string

func (K8sShadowApiServerS) Run

func (p K8sShadowApiServerS) Run() bool

type PidInject

type PidInject struct{}

plugin interface

func (PidInject) Desc

func (p PidInject) Desc() string

func (PidInject) Run

func (p PidInject) Run() bool

type TEST

type TEST struct{}

plugin interface

func (TEST) Desc

func (p TEST) Desc() string

func (TEST) Run

func (p TEST) Run() bool