Posts

Showing posts with the label Containers

Mcextractor - Intel, Amd, Via & Freescale Microcode Extraction Tool

Image
Intel, AMD, VIA & Freescale Microcode Extraction Tool MC Extractor News Feed MC Extractor Discussion Topic Intel, AMD & VIA CPU Microcode Repositories A. About MC Extractor MC Extractor is a tool which parses Intel, AMD, VIA as well as Freescale processor microcode binaries. It tin sack live used yesteryear end-users who are looking for all relevant microcode information such equally CPUID, Platform, Version, Date, Release, Size, Checksum etc. It is capable of converting Intel microcode containers (dat, inc, h, txt) to binary images for BIOS integration, detecting new/unknown microcodes, checking microcode health, Updated/Outdated condition as well as more. MC Extractor tin sack live also used equally a query analysis tool amongst multiple structures which allow, amid others, total parsing & information display of all documented or non microcode Headers. Moreover, amongst the aid of its extensive database, MC Extractor is capable of uniquely categorizing all su...

Kubolt - Utility For Scanning Populace Kubernetes Clusters

Image
Kubolt is a uncomplicated utility for scanning populace unauthinticated kubernetes clusters together with run commands within containers. Why? Sometimes, the kubelet port 10250 is opened upwards to unauthorized access together with makes it possible to run commands within the containers using getrun constituent from kubelet : // getRun handles requests to run a ascendency within a container. func (s *Server) getRun(request *restful.Request, answer *restful.Response) { params := getExecRequestParams(request) pod, ok := s.host.GetPodByName(params.podNamespace, params.podName) if !ok { response.WriteError(http.StatusNotFound, fmt.Errorf("pod does non exist")) render } How? Okay, let's inquire our friend Shodan The basic enquiry is ssl:true port:10250 404 Kubelet uses port 10250 alongside SSL yesteryear default, 404 is the HTTP answer without URL path. Kubolt asks Shodan yesteryear API for listing of IP addresses together with keeps them for oth...