CDK v1.5.4

Release Date: 2024-11-15

📜 Changelog

💣 Exploits

• Fix (exp shim-pwn): #104 merged directory appears twice in path
• Fix(github action):add test poc, panic in Github Action with an unknown error
• Feat(exp): a better output in exploit list
• Refactor(exp): add type string in all exploit
• Fix(exp test): github action check failed with unknown issue
• Refactor(exp): add base struct of Exploit
• Refactor(exp): reorganize exp files in exploit package

🧰 Tools

• Refactor(exp): add base struct of Exploit
• Feat(tools): a keep path for run binary native kubectl in cmd line

✨ Others

• Fix(gh action - gox): gox not found in path
• Fix(gh action - release): automatically failed because it uses a deprecated version
• Chore(.gitignore): /cdk
• Add util: new KubeConfig struct and K8sPod struct
• Add util: new KubeConfig struct
• Add utils(kubelet): util only, add kubelet api response
• Refactor(exp): reorganize exp files in exploit package
• Chore: add assets embed in gitignore
• Chore(test): a simple run test script

🔑 Hash Table

SHA256	EXECTUE FILE
f0fc4517a1a74f1922e41886cc4584c7683f7726111e40f03b26edc6bd9c6642	cdk_darwin_amd64
bca1f1c7d9253bafb3442c4dd95a0b18a82be404ab9442a373b2ff91a47f5164	cdk_linux_386
c52ebc7882d730dcd1d32551e8ed3eca5997f56079efb92c591e62292d3c0c09	cdk_linux_386_thin
fe43248d33a0e7bd20c619186b757febef4508bea3787671d3ecc95ed742b729	cdk_linux_386_thin_upx
edfc7e6329aeeb8cb0df8734ad9083840020e9d2d81d4ae71609dc7339552a0a	cdk_linux_386_upx
20f2e5e7e74953d37c5986b751d8d2e0cdd21d2275dfdfc21a5f4f8b4a37776f	cdk_linux_amd64
d3d1a4bc05989627fc32615a0ec5b280f521577437a7bbce5dbd2e06a9a54602	cdk_linux_amd64_thin
8b1b47c29bc124e99ea4e2d0b9d16ae4c8042b26f4592c46bcadb208dd780f76	cdk_linux_amd64_thin_upx
a53d0d8ca3a89a4e43ea2993031c375499cc01810dc18c65097993c43cc03ea9	cdk_linux_amd64_upx
4a1e4478704d8ad1fbec9b3258f315028fedd0dfbf739508ab1438d42625cbef	cdk_linux_arm
b6fb74cf4bcf1ad06bc0424af481dff96e98cf06803d450c4d9a3b621b63966e	cdk_linux_arm64
68a231b29bc22ff2f956bbfc0215f5c74880da394ddd484144a8ef1013c696d1	cdk_linux_arm64_thin

What's Changed

• [Exploit] Many commit from CDK Plus, for a better list of exploit by @neargle in #103
• fix: fix slice init length by @cuishuang in #105
• kcurl anonymous mode，add random ip addresses to confuse ip addresses by @lufeirider in #106
• Many utils code from cdk plus, for the future exploits. by @neargle in #107
• fix (exp shim-pwn): #104 merged directory appears twice in path by @neargle in #108

Full Changelog: v1.5.3...v1.5.4-alpha