Update kubernetes-pods.yaml
parent
8433bbc0ed
commit
23b3940a17
|
@ -1,11 +1,15 @@
|
|||
id: kubernetes-pods-api
|
||||
|
||||
info:
|
||||
name: Kubernetes Pods API
|
||||
author: ilovebinbash
|
||||
severity: critical
|
||||
description: When the service port is available, anyone can execute commands inside the container. See https://github.com/officialhocc/Kubernetes-Kubelet-RCE for inspiration.
|
||||
|
||||
requests:
|
||||
- method: GET
|
||||
path:
|
||||
- '{{BaseURL}}/pods'
|
||||
- '{{BaseURL}}:10250/pods'
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
|
@ -16,4 +20,4 @@ requests:
|
|||
- type: word
|
||||
words:
|
||||
- "application/json"
|
||||
part: header
|
||||
part: header
|
Loading…
Reference in New Issue