CDK v0.1.10

• bugfix run: check-ptrace
• new exploit: docker-api-pwn to takeover host with port 2375 open.
• change exploit docker-sock-deploy to docker-sock-pwn, the new exploit will run commands directly without attaching to the backdoor container.

CDK v0.1.9

More Exploits Enabled:

1. Evaluate kube-proxy route localnet(CVE-2020-8558) vulnerability.
2. Exploit LXC container with lxcfs mounted into container with rw privilege.
3. Exploit privileged containers with CGroup device.allow overwrite.

v0.1.8

Add multiple K8s exploits.

v0.1.7

• now exploits are more stable with tests inside container/k8s pod.

0.1.6

add CVE-2020-15257 exploit

v0.1.5

add evaluate: cloud metadata api