ctrsploit/ctrsploit issues and pull requests

#105 - release ctrsploit v0.6.0

Issue - State: open - Opened by ssst0n3 almost 2 years ago
Labels: documentation

#104 - add subcommand 'version'

Issue - State: open - Opened by ssst0n3 almost 2 years ago

#103 - Which types of exploits does ctrsploit provide?

Issue - State: open - Opened by ssst0n3 almost 2 years ago
Labels: exploit

#102 - release_agent: what if rootfs is read-only?

Issue - State: open - Opened by ssst0n3 almost 2 years ago
Labels: bug

#101 - support a machine friendly result format

Issue - State: open - Opened by ssst0n3 about 2 years ago
Labels: env

#100 - try 0492 on a ctf challenge

Issue - State: open - Opened by ssst0n3 about 2 years ago
Labels: bug

#99 - Usability Suggestions

Issue - State: open - Opened by dajiaozhang about 2 years ago - 1 comment
Labels: bug

#98 - add a s3 mirror to store releases

Issue - State: open - Opened by ssst0n3 about 2 years ago
Labels: documentation

#97 - support more ways to check whether in container

Issue - State: open - Opened by ssst0n3 over 2 years ago
Labels: enhancement, env

#96 - crash pid 1 by ptrace method

Issue - State: open - Opened by ssst0n3 over 2 years ago - 1 comment
Labels: exploit

#95 - add CVE-2019-5736 runC exploit

Pull Request - State: closed - Opened by normalbe almost 3 years ago
Labels: enhancement, exploit

#94 - update output string in build.sh

Pull Request - State: closed - Opened by normalbe almost 3 years ago

#93 - 91 build a toolkit image for building ctrsploit

Pull Request - State: closed - Opened by normalbe almost 3 years ago

#92 - 91 build a toolkit image for building ctrsploit

Pull Request - State: closed - Opened by normalbe almost 3 years ago - 1 comment

#91 - build a toolkit image for building ctrsploit

Issue - State: closed - Opened by normalbe almost 3 years ago

#90 - shebang optimization

Pull Request - State: closed - Opened by ssst0n3 almost 3 years ago
Labels: bug, enhancement, exploit

#89 - crash: kill pid1's family tree

Issue - State: open - Opened by ssst0n3 almost 3 years ago
Labels: enhancement, exploit

#88 - support killAll for crash exploit

Pull Request - State: closed - Opened by ssst0n3 almost 3 years ago
Labels: enhancement, exploit

#87 - support image pollution exploit for primitive

Pull Request - State: closed - Opened by ssst0n3 almost 3 years ago
Labels: enhancement, exploit

#86 - splice exploit template&dirty-pipe&checksec/selinux

Pull Request - State: closed - Opened by ssst0n3 almost 3 years ago
Labels: enhancement, env, exploit

#85 - return err in Exploit method of all exploits

Issue - State: open - Opened by ssst0n3 almost 3 years ago

#84 - get pod uid inside the k8s container

Issue - State: open - Opened by ssst0n3 almost 3 years ago
Labels: enhancement, env

#83 - add cve-2022-23648 exploit

Issue - State: open - Opened by ssst0n3 almost 3 years ago
Labels: exploit

#82 - build a checksec container image

Issue - State: open - Opened by ssst0n3 almost 3 years ago
Labels: enhancement, env

#81 - add document for cve-2022-0492

Issue - State: open - Opened by ssst0n3 almost 3 years ago
Labels: documentation

#80 - now that this vul has been assigned a cve number, add a alias

Pull Request - State: closed - Opened by ssst0n3 almost 3 years ago
Labels: enhancement, exploit

#79 - cherry pick from ctrsploit_pro

Pull Request - State: closed - Opened by ssst0n3 almost 3 years ago
Labels: enhancement

#78 - pull CVE-2022-0492 from ctrsploit_pro

Issue - State: closed - Opened by ssst0n3 almost 3 years ago - 1 comment
Labels: enhancement, exploit

#77 - env: check whether selinux supported?

Issue - State: open - Opened by ssst0n3 almost 3 years ago
Labels: enhancement, env

#76 - checksec + cve-number

Issue - State: open - Opened by ssst0n3 almost 3 years ago
Labels: env

#75 - check whether in k8s by environment

Issue - State: open - Opened by ssst0n3 about 3 years ago
Labels: help wanted, env

#74 - add a document for CVE-2017-1002101 exploit

Issue - State: open - Opened by ssst0n3 about 3 years ago
Labels: documentation, help wanted

#73 - support custom command parameter for CVE-2017-1002101 exploit

Pull Request - State: closed - Opened by ssst0n3 about 3 years ago
Labels: enhancement, exploit

#72 - some clean up

Pull Request - State: closed - Opened by ssst0n3 about 3 years ago

#71 - implements deploy functionality for CVE-2017-1002101 exploit

Pull Request - State: closed - Opened by ssst0n3 about 3 years ago
Labels: enhancement, exploit

#70 - init cmd structure for CVE-2017-1002101 exploit

Pull Request - State: closed - Opened by ssst0n3 about 3 years ago
Labels: enhancement, exploit

#69 - add document for checksec

Pull Request - State: closed - Opened by ssst0n3 about 3 years ago
Labels: enhancement

#68 - list subsystems from /proc/1/cgroup

Pull Request - State: closed - Opened by ssst0n3 about 3 years ago
Labels: enhancement

#67 - add a documentation for checksec

Issue - State: closed - Opened by ssst0n3 about 3 years ago
Labels: documentation, help wanted

#66 - add checksec command

Pull Request - State: closed - Opened by ssst0n3 about 3 years ago
Labels: enhancement, env

#65 - optimize log format

Pull Request - State: closed - Opened by ssst0n3 about 3 years ago
Labels: enhancement

#64 - detect runtime version

Issue - State: open - Opened by ssst0n3 about 3 years ago
Labels: enhancement, help wanted, env, black_tech

#63 - check cgroup writable

Issue - State: open - Opened by ssst0n3 about 3 years ago
Labels: help wanted, env

#62 - checksec: add a auto collect command

Issue - State: closed - Opened by ssst0n3 about 3 years ago

#61 - reuse exists module

Pull Request - State: closed - Opened by ssst0n3 about 3 years ago
Labels: env

#60 - checksec: reuse exists module

Issue - State: closed - Opened by ssst0n3 about 3 years ago
Labels: env

#59 - bump awesome_libs to v0.6.7

Pull Request - State: closed - Opened by ssst0n3 about 3 years ago
Labels: enhancement

#58 - Init structure for slim tool checksec

Pull Request - State: closed - Opened by ssst0n3 about 3 years ago
Labels: env

#57 - add a checksec tool

Issue - State: closed - Opened by ssst0n3 about 3 years ago
Labels: enhancement, env

#56 - update document for env/cgroup

Pull Request - State: closed - Opened by ssst0n3 about 3 years ago
Labels: documentation, env

#55 - remove todo comment

Pull Request - State: closed - Opened by ssst0n3 about 3 years ago
Labels: enhancement, env

#54 - init where/kata structure

Pull Request - State: closed - Opened by ssst0n3 about 3 years ago
Labels: enhancement, exploit

#53 - update go mod for k8s.io/apimachinery

Pull Request - State: closed - Opened by ssst0n3 about 3 years ago
Labels: enhancement, exploit

#52 - load payload from CVE_2017_1002101

Pull Request - State: closed - Opened by ssst0n3 about 3 years ago
Labels: enhancement, exploit

#51 - auto select top level subsystem to mount

Issue - State: open - Opened by ssst0n3 about 3 years ago
Labels: enhancement, exploit

#50 - check which cgroupv2 subsystems supported by runtime

Issue - State: open - Opened by ssst0n3 about 3 years ago
Labels: help wanted

#49 - List top level cgroup subsystems

Pull Request - State: closed - Opened by ssst0n3 about 3 years ago

#48 - check which cgroupv1 subsystems supported by runtime

Pull Request - State: closed - Opened by ssst0n3 about 3 years ago

#47 - detect runc version by cgroup

Issue - State: open - Opened by ssst0n3 about 3 years ago
Labels: enhancement, env, black_tech

#46 - what if cgroupfs mounted in other path rather than /sys/fs/cgroup ?

Issue - State: open - Opened by ssst0n3 about 3 years ago
Labels: enhancement, env

#45 - check which cgroupv1 subsystems supported by runtime

Issue - State: closed - Opened by ssst0n3 about 3 years ago
Labels: enhancement, env

#44 - check whether in the kata runtime

Issue - State: open - Opened by ssst0n3 about 3 years ago
Labels: env

#43 - add exploit CVE-2021-31440

Issue - State: open - Opened by ssst0n3 about 3 years ago
Labels: exploit

#42 - Add CVE-2020-8562 exploit

Issue - State: open - Opened by ssst0n3 about 3 years ago - 1 comment
Labels: exploit

#41 - Update build command

Issue - State: open - Opened by ssst0n3 about 3 years ago
Labels: enhancement

#40 - init structure for CVE-2021-41091

Pull Request - State: closed - Opened by ssst0n3 about 3 years ago

#39 - init structure for CVE-2020-8555

Pull Request - State: closed - Opened by ssst0n3 about 3 years ago

#38 - Add CVE-2017-1002101 exploit

Issue - State: closed - Opened by ssst0n3 over 3 years ago - 1 comment
Labels: exploit

#37 - Add CVE-2020-8555 exploit

Issue - State: open - Opened by ssst0n3 over 3 years ago
Labels: enhancement, exploit

#36 - Add reverse shell support

Issue - State: open - Opened by ssst0n3 over 3 years ago
Labels: enhancement

#35 - Add CVE-2021-41091 exploit

Issue - State: open - Opened by ssst0n3 over 3 years ago
Labels: enhancement, exploit

#34 - add helper/CVE-2021-3493

Issue - State: closed - Opened by ssst0n3 over 3 years ago - 1 comment
Labels: helper

#33 - cve-2021-3493 doc

Pull Request - State: closed - Opened by ssst0n3 over 3 years ago

#32 - helper/CVE-2021-3493

Pull Request - State: closed - Opened by ssst0n3 over 3 years ago

#31 - update doc

Pull Request - State: closed - Opened by ssst0n3 over 3 years ago

#30 - split ubuntu18.04 from cve-2021-22555

Pull Request - State: closed - Opened by ssst0n3 over 3 years ago

#29 - add helper module to fix #28

Pull Request - State: closed - Opened by ssst0n3 over 3 years ago

#28 - Add helper module

Issue - State: closed - Opened by ssst0n3 over 3 years ago
Labels: enhancement, exploit

#27 - update doc

Pull Request - State: closed - Opened by ssst0n3 over 3 years ago

#26 - add usage for seccomp and apparmor

Pull Request - State: closed - Opened by ssst0n3 over 3 years ago

#25 - Seems there's a bug when capeff=0

Issue - State: open - Opened by ssst0n3 over 3 years ago
Labels: bug, env

#24 - do not use white color text

Issue - State: open - Opened by ssst0n3 over 3 years ago
Labels: enhancement

#23 - Collect dockerd's version

Issue - State: open - Opened by ssst0n3 over 3 years ago
Labels: enhancement

#22 - Auto check exploitable vulnerabilities

Issue - State: open - Opened by ssst0n3 over 3 years ago
Labels: enhancement, env

#21 - Add an introduce for ctrsploit

Issue - State: open - Opened by ssst0n3 over 3 years ago
Labels: documentation, help wanted

#20 - update documents' link

Pull Request - State: closed - Opened by ssst0n3 over 3 years ago

#19 - rename module from ctrsploit to github.com/ctrsploit/ctrsploit

Pull Request - State: closed - Opened by ssst0n3 over 3 years ago

#18 - why ctrsploit

Pull Request - State: closed - Opened by ssst0n3 over 3 years ago

#17 - Draw a picture of att&ck techs ctrsploit supported

Issue - State: open - Opened by ssst0n3 over 3 years ago
Labels: documentation

#16 - Create dry_run

Pull Request - State: closed - Opened by wangl227 over 3 years ago

#15 - translate

Pull Request - State: closed - Opened by ssst0n3 over 3 years ago

#14 - Add 10250 unauthorized exploit

Issue - State: open - Opened by ssst0n3 over 3 years ago
Labels: enhancement, exploit

#13 - Create dry_run

Pull Request - State: closed - Opened by ssst0n3 over 3 years ago

#12 - add doc for exploit/cgroupv1-release_agent

Pull Request - State: closed - Opened by ssst0n3 over 3 years ago

#9 - Add CVE-2020-8558 exploit

Issue - State: open - Opened by ssst0n3 over 3 years ago
Labels: enhancement, exploit

#8 - add github address

Pull Request - State: closed - Opened by ssst0n3 over 3 years ago

#7 - add HOW TO CONTRIBUTE

Pull Request - State: closed - Opened by ssst0n3 over 3 years ago

#6 - Add option for capability to decide whether show current process's capablity

Issue - State: open - Opened by ssst0n3 over 3 years ago
Labels: enhancement, env

#5 - Add aufs graphdriver support

Issue - State: open - Opened by ssst0n3 over 3 years ago
Labels: enhancement, env

#4 - Add namespace support for information gathering

Issue - State: open - Opened by ssst0n3 over 3 years ago
Labels: enhancement, env

GitHub / ctrsploit/ctrsploit issues and pull requests