version 0.2.0
The kubernetesEnumerationTool version 0.2 now makes use of badpods from BishopFox to deploy deployments, statefulsets and other resources. depending on the rights you have on the cluster. In the event you can only create you are given the possibility to deploy a reverse shell and specify the host and port to use.
For now, the exploitation technique is focused on the hostpid and the node debugging, however, we will work on automating other parts as well.
New Features
- different resources can now be used for exploitation (pods, statefullsets)
- A new function Get-ExecutableDeploymentNamespaces which will show case what namespaces you can create, delete and exec upon, which is used internally in the test-node explotation.
Bug Fixes
- There were some troubles with metadata endpoint but those are resolved.