CVE-2022-0185

Awesome resources about Security in Kubernetes

Kubernetes Security Checklist Table of Contents Kubernetes Infrastructure Kubernetes Security Features Kubernetes Authorization - RBAC Kubernetes Pod Security Kubernetes Secrets Kubernetes Networking Kubernetes Supply Chain Security Common attacks Kubernetes Security Tools Kubernetes Security Guides Further reading Collaborate Kubernetes Infrastructure ✅ Limiting acces

CVE-2022-0185 exploit rewritten with pipe primitive

CVE-2022-0185 pipe version Using pipe-primitive to exploit CVE-2022-0185, so no kaslr leak nor smap smep ktpi bypass is needed :) (Q: What is pipe-primitive? A: githubcom/veritas501/pipe-primitive)

An eBPF module created to prevent docker escape attacks by leveraging the unshare command

Container Escape Prevention using eBPF We have conducted a case study on two major CVE exploits on Linux systems: CVE-2022-0185 CVE-2022-0492 Both of the exploits depend on using the unshare command to gain unfair access to a root level namespace and to escape a docker container We first performed these exploits on our systems and then created a Linux security module using e

CVE-Errata-Tool This set of tools help Red Hat TAMs gather information about CVEs, Erratas, etc It calls accessredhatcom/hydra/rest/securitydata API and prints results in the terminal unresolved_cvespy Provides information about CVEs fulfilling search criteria Those include CVE number, release date, severity, URL, description, mitigation strategy, affected produc

CVE-2022-0185 This repo contains demo exploits for CVE-2022-0185 There are two versions here The non-kctf version (fuse version) specifically targets Ubuntu with kernel version 5110-44 It does not directly return a root shell, but makes /bin/bash suid, which will lead to trivial privilege escalation Adjusting the single_start and modprobe_path offsets should allow it to

My CVE, bug bounty, and general cybersec relevant reading list and notes Misc Links National Vulnerability Database: here NVD CVE search: here NVD data feeds listing: here CVE details CVSS distribution listing: here Mitre CVE search: here Pentesterland list of bug bounty writeups: here JFrog security research blogroll: here vuldb listing: here 2022 March Title

Container running cve-2022-0185 crash POC This is a docker container that runs the crash POC from wwwwillsrootio/2022/01/cve-2022-0185html The container runs unprivileged as UID 65534 You can also use docker run -u or set a security context with RunAsUser additionally, all should yield the same result Run it To be clear, if you're vulnerable that will crash

Notes, exploits, and other stuff that I create while learning Linux Kernel exploitation techniques

Linux Kernel Learning This repository is to keep track of my steps learning about the Linux Kernel and Linux Kernel exploitation techniques I might be adding random notes on various aspects of the Linux kernel, exploits of known vulnerabilities that I write myself as a means of learning (don't expect breakthrough research), tricks that I learn along the way, or just anyth

CVE-2022-0185

CVE-2022-0185 This repo contains demo exploits for CVE-2022-0185 There are two versions here The non-kctf version (fuse version) specifically targets Ubuntu with kernel version 5110-44 It does not directly return a root shell, but makes /bin/bash suid, which will lead to trivial privilege escalation Adjusting the single_start and modprobe_path offsets should allow it to

CVE-2022-0185 POC and Docker and Analysis write up

CVE-2022-0185 linux 内核提权(逃逸) [toc] 漏洞简介 漏洞编号: CVE-2022-0185 漏洞评分: 漏洞产品: linux kernel - fsconfig syscall 影响范围: linux kernel 51-rc1 ~ 5162 利用条件: linux 本地; 具有CAP_SYS_ADMIN cap权限(可以unshare 直接获得，等于无限制) 利用效果: 本地提权；容器逃逸 源码获取: git clone git://kernelubunt

Personal goals/study guide

pwn-gym Personal goals/study guide Cover all linux kernel Finish LDD3: lwnnet/Kernel/LDD3/ sk_buff: blogcsdnnet/YuZhiHui_No1/article/details/38690015 blogcsdnnet/yuzhihui_no1/article/details/38737615 blogcsdnnet/YuZhiHui_No1/article/details/38827603 blogcsdnnet/YuZhiHui_No1/article/details/38965069 setsockopt page spray: htt

CVE-2022-0185-Case-Study

Ensure Kubernetes reliability with Datree for misconfigurations, Lens for cluster management, Monokle, and Kubesphere for YAML templates and multi-cluster setups. Kubespace secures clusters, Validkube validates YAML, and Portainer manages containers. Optimize costs effortlessly with kubecost.

MANAGE, SECURE, VALIDATE, DEBUG, MONITOR, HARDENING AND PREVENT MISCONFIGURATION OF KUBERNETES Table of Contents Kubernetes Infrastructure Kubernetes Security Features Kubernetes Authorization - RBAC Kubernetes Pod Security Kubernetes Secrets Kubernetes Networking Kubernetes Supply Chain Security Common Attacks Kubernetes Security Tools Kubernetes Security Guides Further Read