New features
- Make capabilities information readable.
- Update cgroup and hostname capabilities in the evaluate module.
- Update rewrite-cgroup-devices exploit to make it more stable.
- More ports for k8s service probe.
- Enable auto-pwn task.
- New exploit: k8s-get-sa-token
- New exploit: k8s-psp-dump
- Release the thin version, now CDK can be easily used to pwn serverless/function service.
- Use Github actions to compile and release.
Fixes
- HTTP header set twice in several exploits.
- Wrong parameter output in k8s-backdoor-daemonset exploit.
Release Date: 2021-04-11
| sha256 | exectue file |
|---|---|
| 802cc16a8b00b49fbc1685cdfa652fabe7b53d5d0e1fe1a1da4ab0da59ec263f | cdk_darwin_amd64 |
| b074de2206cbff42293870201e0faf2113986a64fba6cc4682e2a87f518ee7d4 | cdk_linux_386 |
| 6e24ebb4b88122fe10261cb8cf32f92c812690c49aea29f2d708557ea5feb186 | cdk_linux_386_thin |
| 350189c879eb3d936a434927b1fa41d353d2ebdbc6589e9efa29ea5e05329fe5 | cdk_linux_386_thin_upx |
| dbeab309b7ecd219233a56c43b0c95f88a39c7d1d524d5f71d319a5928a2b5ad | cdk_linux_386_upx |
| e4f24bd9724afff4200cf4c57eeb2ba37b9bf99b7add53ce1262e2e98c80a812 | cdk_linux_amd64 |
| 0857d4485dee17166c1754eb699e8e8e720bff825717e5a23531cd4b8a3c30c1 | cdk_linux_amd64_thin |
| 752c9bc83cd57649bece5f5885d921fa0dfd8cb62df66b6db1df281e51cdb560 | cdk_linux_amd64_thin_upx |
| 28110f190791aa5b4ca3f0c36dfc39cda8716f165789599de34c8578a70357fd | cdk_linux_amd64_upx |
| cbfe1884821d8aa5cb10a0eec8719f8273b5a65f2ae826c7079006fff71f14e7 | cdk_linux_arm |
| 42e2d4b8d628e3df77baf23238076afb7003f1d31fb08032324f249d80df8302 | cdk_linux_arm64 |
| 58ec2f3cc5cbbcf8add01a0f5f7c8331d830b7944a1031788a5afe4a70ec0a3d | cdk_linux_arm64_thin |