Developing a Cloud Unauthorized Access Tool

Recently, many Docker API unauthorized exploitation tools have become popular on Github, with an average of more than 200 stars. Thinking about why it is so popular, it turns out that there are still many hot spots. Tools + graphics can generate a lot of hot spots.

Then I will also develop a more powerful tool cloud_Unauthorized_tool.

What it can do:

1. The most important thing: graphical (~.~)

1. Docker API is abused without authorization and supports the creation of new privileged containers

1. k8s apiserver unauthorized rce use

1. Unauthorized rce utilization in k8s dashboard

1. Unauthorized use of etcd, supports v3

1. kubelet-10250 not authorized

This project is written using go.

andDifferences of kube-hunter:

The simple understanding is: kube-hunter can only play POC, but cloud Unauthorized_toolCan play exp

for example

1. Support docker api to create privileged containers without authorization,

2.k8s dashboard creates a container and rebounds the shell.

3. After etcd obtains the token, it uses the token to take over k8s.

4.apiserver is not authorized to take over the namespace

Project address:

cdxiaodong/Cloud_Unauthorized_Tool: A tool designed to detect and exploit unauthorized access in various services. It supports the following functionalities (github.com)

Rendering: