Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
cve-2018-1002105 — PoC command injection example for cve-2018-1002105 based off https://github.com/gravitational/cve-2018-1002105 | Kitploit
Tools/GitHubGitHub/bgeesaman/cve-2018-1002105
Vulnerability AnalysisExploitationWeb Application ExploitationPost-ExploitationPenetration TestingCommand and Control
GitHubbgeesaman/cve-2018-1002105

cve-2018-1002105

PoC command injection example for cve-2018-1002105 based off https://github.com/gravitational/cve-2018-1002105

View Repository
117 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

This was modified from https://gravitational.com/blog/kubernetes-websocket-upgrade-security-vulnerability/. All credit goes to the kind folks at Gravitational.

The original PoC code was modified to go a bit beyond checking for vulnerability and to actually run a command inside the first container in the first namespace. In this case, curl -s google.com inside the first pod/container in the default namespace on most clusters. From here, it's easy to make an actual tool to extract secrets, code, exfil data, etc.

CVE-2018-1002105

Download Tool