Kdigger即 "Kuberetesdigger" 的简称,是用于Kuberetes渗透测试的上下文发现工具。
此工具主要用来加速渗透测试过程,可以通过调用mout命令或执行ls/dev列出dev中存在的所有设备。
示例
$kdiggerdigdev###DEVICES###Commet:16devicesareavailable.+-------------+-------+----------------------+-----------------+|MODE|ISDIR|MODTIME|NAME|+-------------+-------+----------------------+-----------------+|Lrwxrwxrwx|false|2021-10-11T07:32:14Z|core||Lrwxrwxrwx|false|2021-10-11T07:32:14Z|fd||Dcrw-rw-rw-|false|2021-10-11T07:32:14Z|full||dtrwxrwxrwx|true|2021-10-11T07:31:54Z|mqueue||Dcrw-rw-rw-|false|2021-10-11T07:32:14Z|ull||Lrwxrwxrwx|false|2021-10-11T07:32:14Z|ptmx||drwxr-xr-x|true|2021-10-11T07:32:14Z|pts||Dcrw-rw-rw-|false|2021-10-11T07:32:14Z|radom||dtrwxrwxrwx|true|2021-10-11T07:31:54Z|shm||Lrwxrwxrwx|false|2021-10-11T07:32:14Z|stderr||Lrwxrwxrwx|false|2021-10-11T07:32:14Z|stdi||Lrwxrwxrwx|false|2021-10-11T07:32:14Z|stdout||-rw-rw-rw-|false|2021-10-11T07:32:14Z|termiatio-log||Dcrw-rw-rw-|false|2021-10-11T07:32:14Z|tty||Dcrw-rw-rw-|false|2021-10-11T07:32:14Z|uradom||Dcrw-rw-rw-|false|2021-10-11T07:32:14Z|zero|+-------------+-------+----------------------+-----------------+$kdiggerdigauthorizatio###AUTHORIZATION###Commet:Checkigcurretcotext/tokepermissiosithe"default"amespace.+---------------------------------+-----------------+----------------+----------+|RESOURCES|NONRESOURCEURLS|RESSOURCENAMES|VERBS|+---------------------------------+-----------------+----------------+----------+|selfsubjectaccessreviews.author|[]|[]|[create]||izatio.k8s.io|||||selfsubjectrulesreviews.authori|[]|[]|[create]||zatio.k8s.io||||||[/api/*]|[]|[get]|||[/api]|[]|[get]|||[/apis/*]|[]|[get]|||[/apis]|[]|[get]|||[/healthz]|[]|[get]|||[/healthz]|[]|[get]|||[/livez]|[]|[get]|||[/livez]|[]|[get]|||[/opeapi/*]|[]|[get]|||[/opeapi]|[]|[get]|||[/readyz]|[]|[get]|||[/readyz]|[]|[get]|||[/versio/]|[]|[get]|||[/versio/]|[]|[get]|||[/versio]|[]|[get]|||[/versio]|[]|[get]||apiservices|[]|[]|[list]||amespaces|[]|[]|[list]||apiservices.apiregistratio.k8s|[]|[]|[list]||.io|||||amespaces.apiregistratio.k8s.|[]|[]|[list]||io||||+---------------------------------+-----------------+----------------+----------+
评论