Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]

This commit is contained in:
CircleCI Atomic Red Team GUID generator
2021-05-28 15:41:55 +00:00
parent 0166331439
commit 590311f89d
4 changed files with 6 additions and 0 deletions
+1
View File
@@ -22,6 +22,7 @@ atomic_tests:
elevation_required: false
- name: Cat the contents of a Kubernetes service account token file
auto_generated_guid: 788e0019-a483-45da-bcfe-96353d46820f
description: |
Access the Kubernetes service account access token stored within a container in a cluster.
+1
View File
@@ -4,6 +4,7 @@ display_name: "Deploy Container"
atomic_tests:
- name: Deploy container using nsenter container escape
auto_generated_guid: 58004e22-022c-4c51-b4a8-2b85ac5c596b
description: |
In this escape `kubectl` is used to launch a new pod, with a container that has the host pids mapped into the container (`hostPID:true`). It uses the alpine linux container image. It runs with privilege on the host (`privileged:true`). When the container is launched the command `nsenter --mount=/proc/1/ns/mnt -- /bin/bash` is ran. Since the host processes have been mapped into the container, the container enters the host namespace, escaping the container.
+1
View File
@@ -4,6 +4,7 @@ display_name: "Escape to Host"
atomic_tests:
- name: Deploy container using nsenter container escape
auto_generated_guid: 0b2f9520-a17a-4671-9dba-3bd034099fff
description: |
In this escape `kubectl` is used to launch a new pod, with a container that has the host pids mapped into the container (`hostPID:true`). It uses the alpine linux container image. It runs with privilege on the host (`privileged:true`). When the container is launched the command `nsenter --mount=/proc/1/ns/mnt -- /bin/bash` is ran. Since the host processes have been mapped into the container, the container enters the host namespace, escaping the container.
+3
View File
@@ -701,3 +701,6 @@ f2fa019e-fb2a-4d28-9dc6-fd1a9b7f68c3
d03bfcd3-ed87-49c8-8880-44bb772dea4b
129edb75-d7b8-42cd-a8ba-1f3db64ec4ad
e2d85e66-cb66-4ed7-93b1-833fc56c9319
788e0019-a483-45da-bcfe-96353d46820f
58004e22-022c-4c51-b4a8-2b85ac5c596b
0b2f9520-a17a-4671-9dba-3bd034099fff