Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-34824 — reproducing an old istio bug | Kitploit
Tools/GitHubGitHub/rsalmond/cve-2021-34824
Vulnerability AnalysisCloud SecurityMisconfigurationLearning & EducationLabs & Practice
GitHubrsalmond/cve-2021-34824

CVE-2021-34824

reproducing an old istio bug

View Repository
123 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2021-34824 repro

reproducing an old istio bug

This set of scripts and manifests will aid in exploring an old Istio security issue which allowed malicious Istio users to access Kubernetes secrets they should not have access to. This reproduction is modeled on this blog post which has some problems. See this blog post for details.

Using

See the vulnerability

  1. Run ./one_time_setup.sh to download the necessary binaries.
  2. Run ./deploy_test.sh to deploy the vulnerable version of istio in a vulnerable configuration.
  3. Run ./evaluate_test.sh to examine the results of the test.

See the fix

  1. Edit istio_versions.sh and switch the variable from to .
Download Tool
ISTIO_VERSION
${ISTIO_VULN}
${ISTIO_SAFE}
  • Run ./deploy_test.sh to deploy the fixed version of istio in the same vulnerable configuration.
  • Run ./rollpods.sh to bounce the gateway pods so they pick up the new version.
  • Run ./check_version.sh to verify that the fixed version of istio is running.
  • Run ./evaluate_test.sh to examine the results again.