nuclei-templates/misconfiguration/kubernetes-pods.yaml

29 lines
778 B
YAML
Raw Normal View History

2020-06-17 17:11:32 +00:00
id: kubernetes-pods-api
2020-09-17 08:50:01 +00:00
2020-06-17 15:56:34 +00:00
info:
name: Kubernetes Pods API
2021-06-09 12:20:56 +00:00
author: ilovebinbash,geeknik,0xtavian
severity: critical
2020-09-17 08:50:01 +00:00
description: When the service port is available, anyone can execute commands inside the container. See https://github.com/officialhocc/Kubernetes-Kubelet-RCE for inspiration.
2020-12-21 19:35:12 +00:00
reference: https://blog.binaryedge.io/2018/12/06/kubernetes-being-hijacked-worldwide/
2021-05-26 21:15:50 +00:00
tags: k8,unauth,kubernetes,devops
2020-09-17 08:50:01 +00:00
2020-06-17 15:56:34 +00:00
requests:
- method: GET
path:
2020-09-17 08:50:01 +00:00
- '{{BaseURL}}/pods'
2020-12-21 19:35:12 +00:00
- '{{BaseURL}}/api/v1/pods'
matchers-condition: and
2020-06-17 15:56:34 +00:00
matchers:
- type: word
words:
- "apiVersion"
part: body
- type: word
words:
- "application/json"
part: header
- type: status
status:
- 200