exploit

Documentation

Index

• Variables
• func AllDiskMount() (error, []string)
• func CapDacReadSearchExploit(target, ref string) error
• func CheckDockerRemoteAPI(url string) bool
• func CheckDockerSock(path string) error
• func CheckFdisk()
• func CheckPidInject() bool
• func ContainerdPwn(shellCmd string, rhost string, rport string) error
• func DeployBackdoorDaemonset(serverAddr string, tokenPath string, image string, inputArgs string, ...) bool
• func DockerAPIPull(path string, image string) error
• func DockerAPIRun(path string, cmd string) error
• func DockerRemoteAPIExploit(api string, cmd string)
• func DockerSockExploit(sock string, cmd string) bool
• func EscapeCgroup(cmd string) error
• func ExploitLXCFS() bool
• func GetDockerAbsPath() string
• func GetK8sSATokenViaCreatePod(tokenPath string, targetServiceAccount string, rhost string, rport string) error
• func GetNamespaces(serverAddr string) string
• func GetNodes(serverAddr string) string
• func MountToRandomTarget(device string) (error, string)
• func ProcfsExploit(procDir string, shellPayload string)
• func ReverseShell(connectString string)
• func SearchLocalFileText(StartDir string)
• type CapDacReadSearch
  • func (p CapDacReadSearch) Desc() string
  • func (p CapDacReadSearch) Run() bool
• type DINDAttackDeployS
  • func (p DINDAttackDeployS) Desc() string
  • func (p DINDAttackDeployS) Run() bool
• type DINDAttackS
  • func (p DINDAttackS) Desc() string
  • func (p DINDAttackS) Run() bool
• type DockerRemoteAPIS
  • func (p DockerRemoteAPIS) Desc() string
  • func (p DockerRemoteAPIS) Run() bool
• type ExploitCgroupS
  • func (p ExploitCgroupS) Desc() string
  • func (p ExploitCgroupS) Run() bool
• type FileScanS
  • func (p FileScanS) Desc() string
  • func (p FileScanS) Run() bool
• type K8SPodSecurityPolicy
  • func (p K8SPodSecurityPolicy) Desc() string
  • func (p K8SPodSecurityPolicy) Run() bool
• type K8sBackDoorDaemonsetS
  • func (p K8sBackDoorDaemonsetS) Desc() string
  • func (p K8sBackDoorDaemonsetS) Run() bool
• type K8sCronJobDeployS
  • func (p K8sCronJobDeployS) Desc() string
  • func (p K8sCronJobDeployS) Run() bool
• type K8sGetSATokenViaCreatePodS
  • func (p K8sGetSATokenViaCreatePodS) Desc() string
  • func (p K8sGetSATokenViaCreatePodS) Run() bool
• type K8sMitmClusteripS
  • func (p K8sMitmClusteripS) Desc() string
  • func (p K8sMitmClusteripS) Run() bool
• type K8sSecretsDumpS
  • func (p K8sSecretsDumpS) Desc() string
  • func (p K8sSecretsDumpS) Run() bool
• type K8sShadowApiServerS
  • func (p K8sShadowApiServerS) Desc() string
  • func (p K8sShadowApiServerS) Run() bool
• type PidInject
  • func (p PidInject) Desc() string
  • func (p PidInject) Run() bool
• type TEST
  • func (p TEST) Desc() string
  • func (p TEST) Run() bool

Variables

var K8sDeploymentsAPI = "/apis/apps/v1/namespaces/default/deployments"

var K8sMitmPayloadDeploy = `` /* 908-byte string literal not displayed */

var K8sMitmPayloadSvc = `` /* 447-byte string literal not displayed */

var K8sServicesApi = "/api/v1/namespaces/default/services"

Functions

func AllDiskMount

func AllDiskMount() (error, []string)

print all device and mount them to random path under /tmp

func CapDacReadSearchExploit

func CapDacReadSearchExploit(target, ref string) error

func CheckDockerRemoteAPI

func CheckDockerRemoteAPI(url string) bool

func CheckDockerSock

func CheckDockerSock(path string) error

APIs Ref https://github.com/AbsoZed/DockerPwn.py/blob/master/createContainer.py curl --unix-socket /var/run/docker.sock http://127.0.0.1/info

func CheckFdisk

func CheckFdisk()

add this to check if the container have device priv

func CheckPidInject

func CheckPidInject() bool

func ContainerdPwn

func ContainerdPwn(shellCmd string, rhost string, rport string) error

func DeployBackdoorDaemonset

func DeployBackdoorDaemonset(serverAddr string, tokenPath string, image string, inputArgs string, k8sApp string) bool

func DockerAPIPull

func DockerAPIPull(path string, image string) error

func DockerAPIRun

func DockerAPIRun(path string, cmd string) error

APIs Ref https://github.com/AbsoZed/DockerPwn.py/blob/master/createContainer.py curl --unix-socket /var/run/docker.sock http://127.0.0.1/info

func DockerRemoteAPIExploit

func DockerRemoteAPIExploit(api string, cmd string)

func DockerSockExploit

func DockerSockExploit(sock string, cmd string) bool

func EscapeCgroup

func EscapeCgroup(cmd string) error

func ExploitLXCFS

func ExploitLXCFS() bool

func GetDockerAbsPath

func GetDockerAbsPath() string

func GetK8sSATokenViaCreatePod

func GetK8sSATokenViaCreatePod(tokenPath string, targetServiceAccount string, rhost string, rport string) error

func GetNamespaces

func GetNamespaces(serverAddr string) string

func GetNodes

func GetNodes(serverAddr string) string

func MountToRandomTarget

func MountToRandomTarget(device string) (error, string)

func ProcfsExploit

func ProcfsExploit(procDir string, shellPayload string)

func ReverseShell

func ReverseShell(connectString string)

func SearchLocalFileText

func SearchLocalFileText(StartDir string)

Types

type CapDacReadSearch

type CapDacReadSearch struct{}

plugin interface

func (CapDacReadSearch) Desc

func (p CapDacReadSearch) Desc() string

func (CapDacReadSearch) Run

func (p CapDacReadSearch) Run() bool

type DINDAttackDeployS

type DINDAttackDeployS struct{}

plugin interface

func (DINDAttackDeployS) Desc

func (p DINDAttackDeployS) Desc() string

func (DINDAttackDeployS) Run

func (p DINDAttackDeployS) Run() bool

type DINDAttackS

type DINDAttackS struct{}

plugin interface

func (DINDAttackS) Desc

func (p DINDAttackS) Desc() string

func (DINDAttackS) Run

func (p DINDAttackS) Run() bool

type DockerRemoteAPIS

type DockerRemoteAPIS struct{}

plugin interface

func (DockerRemoteAPIS) Desc

func (p DockerRemoteAPIS) Desc() string

func (DockerRemoteAPIS) Run

func (p DockerRemoteAPIS) Run() bool

type ExploitCgroupS

type ExploitCgroupS struct{}

plugin interface

func (ExploitCgroupS) Desc

func (p ExploitCgroupS) Desc() string

func (ExploitCgroupS) Run

func (p ExploitCgroupS) Run() bool

type FileScanS

type FileScanS struct{}

plugin interface

func (FileScanS) Desc

func (p FileScanS) Desc() string

func (FileScanS) Run

func (p FileScanS) Run() bool

type K8SPodSecurityPolicy

type K8SPodSecurityPolicy struct{}

plugin interface

func (K8SPodSecurityPolicy) Desc

func (p K8SPodSecurityPolicy) Desc() string

func (K8SPodSecurityPolicy) Run

func (p K8SPodSecurityPolicy) Run() bool

type K8sBackDoorDaemonsetS

type K8sBackDoorDaemonsetS struct{}

plugin interface

func (K8sBackDoorDaemonsetS) Desc

func (p K8sBackDoorDaemonsetS) Desc() string

func (K8sBackDoorDaemonsetS) Run

func (p K8sBackDoorDaemonsetS) Run() bool

type K8sCronJobDeployS

type K8sCronJobDeployS struct{}

plugin interface

func (K8sCronJobDeployS) Desc

func (p K8sCronJobDeployS) Desc() string

func (K8sCronJobDeployS) Run

func (p K8sCronJobDeployS) Run() bool

type K8sGetSATokenViaCreatePodS

type K8sGetSATokenViaCreatePodS struct{}

plugin interface

func (K8sGetSATokenViaCreatePodS) Desc

func (p K8sGetSATokenViaCreatePodS) Desc() string

func (K8sGetSATokenViaCreatePodS) Run

func (p K8sGetSATokenViaCreatePodS) Run() bool

type K8sMitmClusteripS

type K8sMitmClusteripS struct{}

plugin interface

func (K8sMitmClusteripS) Desc

func (p K8sMitmClusteripS) Desc() string

func (K8sMitmClusteripS) Run

func (p K8sMitmClusteripS) Run() bool

type K8sSecretsDumpS

type K8sSecretsDumpS struct{}

plugin interface

func (K8sSecretsDumpS) Desc

func (p K8sSecretsDumpS) Desc() string

func (K8sSecretsDumpS) Run

func (p K8sSecretsDumpS) Run() bool

type K8sShadowApiServerS

type K8sShadowApiServerS struct{}

plugin interface

func (K8sShadowApiServerS) Desc

func (p K8sShadowApiServerS) Desc() string

func (K8sShadowApiServerS) Run

func (p K8sShadowApiServerS) Run() bool

type PidInject

type PidInject struct{}

plugin interface

func (PidInject) Desc

func (p PidInject) Desc() string

func (PidInject) Run

func (p PidInject) Run() bool

type TEST

type TEST struct{}

plugin interface

func (TEST) Desc

func (p TEST) Desc() string

func (TEST) Run

func (p TEST) Run() bool