Update kubernetes-pods.yaml

patch-1
bauthard 2020-09-17 14:20:01 +05:30
parent 8433bbc0ed
commit 23b3940a17
1 changed files with 5 additions and 1 deletions

View File

@ -1,11 +1,15 @@
id: kubernetes-pods-api
info:
name: Kubernetes Pods API
author: ilovebinbash
severity: critical
description: When the service port is available, anyone can execute commands inside the container. See https://github.com/officialhocc/Kubernetes-Kubelet-RCE for inspiration.
requests:
- method: GET
path:
- '{{BaseURL}}/pods'
- '{{BaseURL}}:10250/pods'
matchers-condition: and
matchers:
@ -16,4 +20,4 @@ requests:
- type: word
words:
- "application/json"
part: header
part: header