Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
Xyntax authored Apr 14, 2021
1 parent cae3cf7 commit 3d86365
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -129,7 +129,7 @@ cdk run <script-name> [options]
|Escaping|Rewrite Cgroup(devices.allow)|rewrite-cgroup-devices|||[link](https://github.com/cdk-team/CDK/wiki/Exploit:-rewrite-cgroup-devices)|
|Discovery|K8s Component Probe|service-probe|||[link](https://github.com/cdk-team/CDK/wiki/Exploit:-service-probe)|
|Discovery|Dump Istio Sidecar Meta|istio-check|||[link](https://github.com/cdk-team/CDK/wiki/Exploit:-check-istio)|
|Discovery|Dump K8s Pod Security Policies|k8s-psp-dump||[link](https://github.com/cdk-team/CDK/wiki/Exploit:-k8s-psp-dump)|
|Discovery|Dump K8s Pod Security Policies|k8s-psp-dump|||[link](https://github.com/cdk-team/CDK/wiki/Exploit:-k8s-psp-dump)|
|Remote Control|Reverse Shell|reverse-shell|||[link](https://github.com/cdk-team/CDK/wiki/Exploit:-reverse-shell)|
|Credential Access|Access Key Scanning|ak-leakage|||[link](https://github.com/cdk-team/CDK/wiki/Exploit:-ak-leakage)|
|Credential Access|Dump K8s Secrets|k8s-secret-dump|||[link](https://github.com/cdk-team/CDK/wiki/Exploit:-k8s-secret-dump)|
Expand All @@ -141,7 +141,7 @@ cdk run <script-name> [options]
|Persistence|K8s MITM Attack (CVE-2020-8554)|k8s-mitm-clusterip|||[link](https://github.com/cdk-team/CDK/wiki/Evaluate:-k8s-mitm-clusterip)|
|Persistence|Deploy K8s CronJob|k8s-cronjob|||[link](https://github.com/cdk-team/CDK/wiki/Exploit:-k8s-cronjob)|

**Note about Thin:** The version about **thin** is prepared for container shells with a short life cycle such as Serverless. In order to be lighter, it will cut very few exploits that cause the program to become fat.
**Note about Thin:** The **thin release** is prepared for short life container shells such as serverless functions. We add build tags in source code and cut a few exploits to get the binary lighter, the 2MB file contains 90% of CDK functions, also you can pick up useful exploits in CDK source code to build your own lightweight binary.

### Tool Module

Expand Down Expand Up @@ -216,4 +216,4 @@ Project CDK is now included in 404Team [Starlink Project 2.0](https://github.com

### HITB SecConf 2021 Amsterdam

- [Briefing: "Attack Cloud Native Kubernetes"](https://conference.hitb.org/hitbsecconf2021ams/)
- [Briefing: "Attack Cloud Native Kubernetes"](https://conference.hitb.org/hitbsecconf2021ams/)

0 comments on commit 3d86365

Please sign in to comment.