Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
webhook-cve-2022-0811 — Simple webhook to block exploitation of CVE-2022-0811 | Kitploit
Tools/GitHubGitHub/spiarh/webhook-cve-2022-0811
Vulnerability ScannersContainer SecurityCloud SecurityDevSecOpsIntrusion DetectionMisconfigurationArchived
GitHubspiarh/webhook-cve-2022-0811

webhook-cve-2022-0811

Simple webhook to block exploitation of CVE-2022-0811

View Repository
8464 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

webhook-cve-2022-0811

This is a really simple webhook that just blocks pod creation if malicious sysctl values are configured.

Build

root@kitploit:~
go test
CGO_ENABLED=0 GOOS=linux GOARCH=amd64 GO111MODULE=on go build

Build image an deploy in Minikube

Start minikube:

root@kitploit:~
minikube start
minikube addons enable registry

Build:

root@kitploit:~
podman build -t localhost:5000/webhook-cve-2022-0811:latest .
podman push --tls-verify=false "$(minikube ip):5000/webhook-cve-2022-0811:latest"

Deploy:

root@kitploit:~
cd kustomize/
kustomize build | kubectl apply -f -

Test

Create the following pod:

root@kitploit:~
apiVersion: v1
kind: Pod
metadata:
  name: sysctl-set
  namespace: default
spec:
  securityContext:
   sysctls:
   - name: kernel.shm_rmid_forced
     value: "1+kernel.core_pattern"
  containers:
  - name: test
    image: k8s.gcr.io/pause:3.2
Download Tool