The Cost of Exposing your Kubecost
Intro : During a recent engagement of reviewing a Kubernetes environment I came across a service called “Kubecost”, which is intended to be used for monitori...
Posts by Year
2024
CVE-2024-26367
CVE-2024-26367
RCE into EA using Kubeflow Notebooks
Intro Multiple articles and blog posts written about Kubeflow intrigued me to dive (albeit shallow) into and scour the depths of Shodan one evening to see wh...
2023
CVE-2023-39854
CVE-2023-39854
Burp Suite Extension - Raw Collaborator
The following describes the set up and usage of a Burp Suite Extension I wrote, that creates a new Collaborator URL and dumps the raw Interaction transaction...
CVE-2023-38523
CVE-2023-38523
Pentesting FoundationDB
During a recent Pentesting engagement, I came across a service using FoundationDB to store application layer configurations and state. This lead me to dive i...
Database Credential Dumps
The following is a compilation of queries to list database user hashes, which are stored locally in tables. The hashes obtained can be cracked using password...