3 ms·
CDK is an open-sourced container penetration toolkit, designed for offering stable exploitation in different slimmed containers without any OS dependency. It co
by cdxy 6y ago
CDK is an open-sourced container penetration toolkit, designed for offering stable exploitation in different slimmed containers without any OS dependency. It comes with useful net-tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.
CDK is a CLI tool which allows you to:
1. Evaluate weakness in containers or K8s pods.
2. Exploit multiple container vulnerabilities.
3. Perform common container post-exploitation actions.
4. Provide capability when host-based tools or binaries are not available in the container.
5. Perform the above in a manual or automated approach.
Features of current open-sourced pre-release v0.1.7:
1. Evaluate target container to find potential weakness (including 11 items).
2. Exploitation for container escaping, persistence and lateral movement (13 exploits).
3. Tools for network actions, probe, tunnel and K8s cluster management (7 tools).
See more in https://github.com/cdk-team/CDK https://github.com/cdk-team/CDK