CDK – Zero Dependency Container Penetration Toolkit
1–3 of 3 posts
Re: CDK – Zero Dependency Container Penetration Toolkit
#2CDK is an open-sourced container penetration toolkit, designed for offering stable exploitation in different slimmed containers without any OS dependency. It comes with useful net-tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.
CDK is a CLI tool which allows you to:
1. Evaluate weakness in containers or K8s pods. 2. Exploit multiple container vulnerabilities. 3. Perform common container post-exploitation actions. 4. Provide capability when host-based tools or binaries are not available in the container. 5. Perform the above in a manual or automated approach.
Features of current open-sourced pre-release v0.1.7:
1. Evaluate target container to find potential weakness (including 11 items). 2. Exploitation for container escaping, persistence and lateral movement (13 exploits). 3. Tools for network actions, probe, tunnel and K8s cluster management (7 tools).
See more in https://github.com/cdk-team/CDK
Re: CDK – Zero Dependency Container Penetration Toolkit
#3Do you think that people who develop or deploy on docker and kubernetes should be worried about future vulnerabilities of this software ecosystem? I mean, will we reach a point in which the easiest solution would be abandoning containerization and going back to the old way to deploy software?