badPods
by BishopFox
A collection of manifests that will create pods with elevated privileges.
AI summary
Pod exploit demonstrator
A collection of Kubernetes pod manifests demonstrating the impact of elevated privileges on security and functionality.
- stars
- 603
- forks
- 103
- watching
- 21
Similar projects
Found by comparing what the projects do, not just their names.
Host log exploit
An exploit allowing unauthorized access to sensitive data on a host machine through Kubernetes logs
Pod inspector
Provides a tool to inspect and view details of pods on Kubernetes nodes
Kubernetes exploit demo
Demonstrates an escape vulnerability in Kubernetes allowing privileged access to a pod through symlinks
Proxy smuggler
Smuggling HTTP traffic past proxy rules to bypass access controls
Deserialization scanner
Tools for analyzing and exploiting vulnerabilities in Java deserialization vulnerabilities
Container analyzer and exploiter
A tool designed to analyze and exploit vulnerabilities in containers for pentesters and engineers
Vulnerability exploitation toolkit
A collection of tools and techniques for exploiting vulnerabilities in software applications.
XML Exploiter
An application used to exploit XXE vulnerabilities by generating XML payloads and serving them to test web applications.
Pod executor
An interactive tool for executing commands on pods in a Kubernetes cluster.
Denial-of-Service exploit
Exploits a heap buffer overflow vulnerability in the XNU operating system kernel to cause a denial-of-service attack on iOS and macOS devices.
Kernel exploit demos
Demonstrates security vulnerabilities in the Linux kernel's eBPF system
Vulnerability scanner
A collection of tools and methodologies for identifying vulnerabilities in web applications
DeFi testbed
A DeFi protocol with intentional vulnerabilities for testing and learning secure smart contract development
Network Exploiter
A toolkit for exploiting weaknesses in WPA2-Enterprise networks to gain unauthorized access to credentials
Packer
Creates stealthy droppers for loading malicious code into memory
