Skip to content

Commit

Permalink
Automated update from CI
Browse files Browse the repository at this point in the history
  • Loading branch information
@stealthcopter
stealthcopter committed Dec 28, 2023
1 parent 7e3327a commit 2deee86
Show file tree
Hide file tree
Showing 22 changed files with 52 additions and 52 deletions.
4 changes: 2 additions & 2 deletions results/docker-alpine-cve-2019-5021.html
View file
Original file line number Diff line number Diff line change
Expand Up @@ -51,7 +51,7 @@
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Docker Sock ............. </span><span style="font-weight:bold;filter: contrast(70%) brightness(190%);color:dimgray;">Not Found</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Docker Version .......... </span><span style="font-weight:bold;color:red;">Version Unknown</span>
<span style="font-weight:bold;color:#3333FF;">==================================</span><span style="font-weight:bold;color:lime;">( Enumerating Container )</span><span style="font-weight:bold;color:#3333FF;">===================================</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Container ID ............ </span><span style="font-weight:bold;color:yellow;">cb772eb18451</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Container ID ............ </span><span style="font-weight:bold;color:yellow;">fb333edd8dd2</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Container Full ID ....... </span><span style="font-weight:bold;color:yellow;">/</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Container Name .......... </span><span style="font-weight:bold;color:red;">Could not get container name through reverse DNS</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Container IP ............ </span><span style="font-weight:bold;color:yellow;">172.17.0.2</span>
Expand Down Expand Up @@ -92,7 +92,7 @@
<span style="font-weight:bold;color:#3333FF;">====================================</span><span style="font-weight:bold;color:lime;">( Interesting Files )</span><span style="font-weight:bold;color:#3333FF;">=====================================</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Interesting environment variables ... </span><span style="font-weight:bold;filter: contrast(70%) brightness(190%);color:dimgray;">No</span>
<span style="font-weight:bold;filter: contrast(70%) brightness(190%);color:dimgray;">HOME=/root
HOSTNAME=cb772eb18451
HOSTNAME=fb333edd8dd2
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
PWD=/
SHLVL=1</span>
Expand Down
4 changes: 2 additions & 2 deletions results/docker-alpine-cve-2019-5021.log
View file
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@ See https://stealthcopter.github.io/deepce
[+] Docker Sock ............. Not Found
[+] Docker Version .......... Version Unknown
==================================( Enumerating Container )===================================
[+] Container ID ............ cb772eb18451
[+] Container ID ............ fb333edd8dd2
[+] Container Full ID ....... /
[+] Container Name .......... Could not get container name through reverse DNS
[+] Container IP ............ 172.17.0.2
Expand Down Expand Up @@ -82,7 +82,7 @@ password, if we have command execution in the container we can become root using
====================================( Interesting Files )=====================================
[+] Interesting environment variables ... No
HOME=/root
HOSTNAME=cb772eb18451
HOSTNAME=fb333edd8dd2
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
PWD=/
SHLVL=1
Expand Down
16 changes: 8 additions & 8 deletions results/docker-alpine-payload-command.html
View file
Original file line number Diff line number Diff line change
Expand Up @@ -103,13 +103,13 @@
Architecture:x86_64
NCPU:4
DockerRootDir:/var/lib/docker
Name:fv-az1019-229
Name:fv-az714-545
ServerVersion:24.0.7</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Docker Version .......... </span><span style="font-weight:bold;color:yellow;">24.0.7</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> CVE–2019–13139 .......... </span><span style="font-weight:bold;filter: contrast(70%) brightness(190%);color:dimgray;">No</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> CVE–2019–5736 ........... </span><span style="font-weight:bold;filter: contrast(70%) brightness(190%);color:dimgray;">No</span>
<span style="font-weight:bold;color:#3333FF;">==================================</span><span style="font-weight:bold;color:lime;">( Enumerating Container )</span><span style="font-weight:bold;color:#3333FF;">===================================</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Container ID ............ </span><span style="font-weight:bold;color:yellow;">a99df58c18c6</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Container ID ............ </span><span style="font-weight:bold;color:yellow;">24e2014fb4d7</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Container Full ID ....... </span><span style="font-weight:bold;color:yellow;">/</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Container Name .......... </span><span style="font-weight:bold;color:red;">Could not get container name through reverse DNS</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Container IP ............ </span><span style="font-weight:bold;color:yellow;">172.17.0.2</span>
Expand Down Expand Up @@ -148,7 +148,7 @@
<span style="font-weight:bold;color:#3333FF;">====================================</span><span style="font-weight:bold;color:lime;">( Interesting Files )</span><span style="font-weight:bold;color:#3333FF;">=====================================</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Interesting environment variables ... </span><span style="font-weight:bold;filter: contrast(70%) brightness(190%);color:dimgray;">No</span>
<span style="font-weight:bold;filter: contrast(70%) brightness(190%);color:dimgray;">HOME=/root
HOSTNAME=a99df58c18c6
HOSTNAME=24e2014fb4d7
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
PWD=/
SHLVL=1</span>
Expand All @@ -171,13 +171,13 @@
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Custom Command ........... </span><span style="font-weight:bold;filter: contrast(70%) brightness(190%);color:dimgray;">touch /tmp/deepce-docker-alpine-payload-command.hacked</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Clean up ................. </span><span style="font-weight:bold;filter: contrast(70%) brightness(190%);color:dimgray;">Automatic on container exit</span>

<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Creating container ..... </span><span style="font-weight:bold;color:yellow;">e0d00ef7ae5f90e32d8eb3d740ade04dece5b50ae033a33ffc45e55841a0ab4e</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Creating container ..... </span><span style="font-weight:bold;color:yellow;">ce327de8c3a3602966e11b9dae9bece8c9ce3df2841f6b399fc78c08c567e300</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> If the shell dies you can restart your listener and run the start command to fire it again </span>
<span style="font-weight:bold;filter: contrast(70%) brightness(190%);color:dimgray;">Start Command: curl -s -XPOST --unix-socket /var/run/docker.sock http://localhost/containers/e0d00ef7ae5f90e32d8eb3d740ade04dece5b50ae033a33ffc45e55841a0ab4e/start</span>
<span style="font-weight:bold;filter: contrast(70%) brightness(190%);color:dimgray;">Logs Command: curl -s --unix-socket /var/run/docker.sock &quot;http://localhost/containers/e0d00ef7ae5f90e32d8eb3d740ade04dece5b50ae033a33ffc45e55841a0ab4e/logs?stderr=1&amp;stdout=1&quot; --output -</span>
<span style="font-weight:bold;filter: contrast(70%) brightness(190%);color:dimgray;">Start Command: curl -s -XPOST --unix-socket /var/run/docker.sock http://localhost/containers/ce327de8c3a3602966e11b9dae9bece8c9ce3df2841f6b399fc78c08c567e300/start</span>
<span style="font-weight:bold;filter: contrast(70%) brightness(190%);color:dimgray;">Logs Command: curl -s --unix-socket /var/run/docker.sock &quot;http://localhost/containers/ce327de8c3a3602966e11b9dae9bece8c9ce3df2841f6b399fc78c08c567e300/logs?stderr=1&amp;stdout=1&quot; --output -</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Once complete remember to tidy up by stopping and removing your container with following commands </span>
<span style="font-weight:bold;filter: contrast(70%) brightness(190%);color:dimgray;">Stop Command: curl -s -XPOST --unix-socket /var/run/docker.sock http://localhost/containers/e0d00ef7ae5f90e32d8eb3d740ade04dece5b50ae033a33ffc45e55841a0ab4e/stop</span>
<span style="font-weight:bold;filter: contrast(70%) brightness(190%);color:dimgray;">Remove Command: curl -s -XDELETE --unix-socket /var/run/docker.sock http://localhost/containers/e0d00ef7ae5f90e32d8eb3d740ade04dece5b50ae033a33ffc45e55841a0ab4e</span>
<span style="font-weight:bold;filter: contrast(70%) brightness(190%);color:dimgray;">Stop Command: curl -s -XPOST --unix-socket /var/run/docker.sock http://localhost/containers/ce327de8c3a3602966e11b9dae9bece8c9ce3df2841f6b399fc78c08c567e300/stop</span>
<span style="font-weight:bold;filter: contrast(70%) brightness(190%);color:dimgray;">Remove Command: curl -s -XDELETE --unix-socket /var/run/docker.sock http://localhost/containers/ce327de8c3a3602966e11b9dae9bece8c9ce3df2841f6b399fc78c08c567e300</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Starting container ..... </span><span style="font-weight:bold;color:yellow;">Success</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Sleeping for ........... </span><span style="font-weight:bold;filter: contrast(70%) brightness(190%);color:dimgray;">2s</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Fetching logs .......... </span><span style="font-weight:bold;color:yellow;">Success</span>
Expand Down
16 changes: 8 additions & 8 deletions results/docker-alpine-payload-command.log
View file
Original file line number Diff line number Diff line change
Expand Up @@ -93,13 +93,13 @@ OSType:linux
Architecture:x86_64
NCPU:4
DockerRootDir:/var/lib/docker
Name:fv-az1019-229
Name:fv-az714-545
ServerVersion:24.0.7
[+] Docker Version .......... 24.0.7
[+] CVE–2019–13139 .......... No
[+] CVE–2019–5736 ........... No
==================================( Enumerating Container )===================================
[+] Container ID ............ a99df58c18c6
[+] Container ID ............ 24e2014fb4d7
[+] Container Full ID ....... /
[+] Container Name .......... Could not get container name through reverse DNS
[+] Container IP ............ 172.17.0.2
Expand Down Expand Up @@ -138,7 +138,7 @@ See https://stealthcopter.github.io/deepce/guides/docker-sock.md
====================================( Interesting Files )=====================================
[+] Interesting environment variables ... No
HOME=/root
HOSTNAME=a99df58c18c6
HOSTNAME=24e2014fb4d7
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
PWD=/
SHLVL=1
Expand All @@ -161,13 +161,13 @@ host machine, this can be used to enumerate further
[+] Custom Command ........... touch /tmp/deepce-docker-alpine-payload-command.hacked
[+] Clean up ................. Automatic on container exit

[+] Creating container ..... e0d00ef7ae5f90e32d8eb3d740ade04dece5b50ae033a33ffc45e55841a0ab4e
[+] Creating container ..... ce327de8c3a3602966e11b9dae9bece8c9ce3df2841f6b399fc78c08c567e300
[+] If the shell dies you can restart your listener and run the start command to fire it again 
Start Command: curl -s -XPOST --unix-socket /var/run/docker.sock http://localhost/containers/e0d00ef7ae5f90e32d8eb3d740ade04dece5b50ae033a33ffc45e55841a0ab4e/start
Logs Command: curl -s --unix-socket /var/run/docker.sock "http://localhost/containers/e0d00ef7ae5f90e32d8eb3d740ade04dece5b50ae033a33ffc45e55841a0ab4e/logs?stderr=1&stdout=1" --output -
Start Command: curl -s -XPOST --unix-socket /var/run/docker.sock http://localhost/containers/ce327de8c3a3602966e11b9dae9bece8c9ce3df2841f6b399fc78c08c567e300/start
Logs Command: curl -s --unix-socket /var/run/docker.sock "http://localhost/containers/ce327de8c3a3602966e11b9dae9bece8c9ce3df2841f6b399fc78c08c567e300/logs?stderr=1&stdout=1" --output -
[+] Once complete remember to tidy up by stopping and removing your container with following commands 
Stop Command: curl -s -XPOST --unix-socket /var/run/docker.sock http://localhost/containers/e0d00ef7ae5f90e32d8eb3d740ade04dece5b50ae033a33ffc45e55841a0ab4e/stop
Remove Command: curl -s -XDELETE --unix-socket /var/run/docker.sock http://localhost/containers/e0d00ef7ae5f90e32d8eb3d740ade04dece5b50ae033a33ffc45e55841a0ab4e
Stop Command: curl -s -XPOST --unix-socket /var/run/docker.sock http://localhost/containers/ce327de8c3a3602966e11b9dae9bece8c9ce3df2841f6b399fc78c08c567e300/stop
Remove Command: curl -s -XDELETE --unix-socket /var/run/docker.sock http://localhost/containers/ce327de8c3a3602966e11b9dae9bece8c9ce3df2841f6b399fc78c08c567e300
[+] Starting container ..... Success
[+] Sleeping for ........... 2s
[+] Fetching logs .......... Success
Expand Down
4 changes: 2 additions & 2 deletions results/docker-alpine-privileged.html
View file
Original file line number Diff line number Diff line change
Expand Up @@ -51,7 +51,7 @@
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Docker Sock ............. </span><span style="font-weight:bold;filter: contrast(70%) brightness(190%);color:dimgray;">Not Found</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Docker Version .......... </span><span style="font-weight:bold;color:red;">Version Unknown</span>
<span style="font-weight:bold;color:#3333FF;">==================================</span><span style="font-weight:bold;color:lime;">( Enumerating Container )</span><span style="font-weight:bold;color:#3333FF;">===================================</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Container ID ............ </span><span style="font-weight:bold;color:yellow;">fc03ae1b2fd7</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Container ID ............ </span><span style="font-weight:bold;color:yellow;">706e2d7b0e33</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Container Full ID ....... </span><span style="font-weight:bold;color:yellow;">/</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Container Name .......... </span><span style="font-weight:bold;color:red;">Could not get container name through reverse DNS</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Container IP ............ </span><span style="font-weight:bold;color:yellow;">172.17.0.2</span>
Expand Down Expand Up @@ -93,7 +93,7 @@
<span style="font-weight:bold;color:#3333FF;">====================================</span><span style="font-weight:bold;color:lime;">( Interesting Files )</span><span style="font-weight:bold;color:#3333FF;">=====================================</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Interesting environment variables ... </span><span style="font-weight:bold;filter: contrast(70%) brightness(190%);color:dimgray;">No</span>
<span style="font-weight:bold;filter: contrast(70%) brightness(190%);color:dimgray;">HOME=/root
HOSTNAME=fc03ae1b2fd7
HOSTNAME=706e2d7b0e33
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
PWD=/
SHLVL=1</span>
Expand Down
4 changes: 2 additions & 2 deletions results/docker-alpine-privileged.log
View file
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@ See https://stealthcopter.github.io/deepce
[+] Docker Sock ............. Not Found
[+] Docker Version .......... Version Unknown
==================================( Enumerating Container )===================================
[+] Container ID ............ fc03ae1b2fd7
[+] Container ID ............ 706e2d7b0e33
[+] Container Full ID ....... /
[+] Container Name .......... Could not get container name through reverse DNS
[+] Container IP ............ 172.17.0.2
Expand Down Expand Up @@ -83,7 +83,7 @@ See https://stealthcopter.github.io/deepce/guides/docker-privileged.md[
====================================( Interesting Files )=====================================
[+] Interesting environment variables ... No
HOME=/root
HOSTNAME=fc03ae1b2fd7
HOSTNAME=706e2d7b0e33
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
PWD=/
SHLVL=1
Expand Down
4 changes: 2 additions & 2 deletions results/docker-alpine-secrets.html
View file
Original file line number Diff line number Diff line change
Expand Up @@ -51,7 +51,7 @@
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Docker Sock ............. </span><span style="font-weight:bold;filter: contrast(70%) brightness(190%);color:dimgray;">Not Found</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Docker Version .......... </span><span style="font-weight:bold;color:red;">Version Unknown</span>
<span style="font-weight:bold;color:#3333FF;">==================================</span><span style="font-weight:bold;color:lime;">( Enumerating Container )</span><span style="font-weight:bold;color:#3333FF;">===================================</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Container ID ............ </span><span style="font-weight:bold;color:yellow;">c6ed9f93d675</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Container ID ............ </span><span style="font-weight:bold;color:yellow;">2eed50673b37</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Container Full ID ....... </span><span style="font-weight:bold;color:yellow;">/</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Container Name .......... </span><span style="font-weight:bold;color:red;">Could not get container name through reverse DNS</span>
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Container IP ............ </span><span style="font-weight:bold;color:yellow;">172.17.0.2</span>
Expand Down Expand Up @@ -90,7 +90,7 @@
<span style="font-weight:bold;color:yellow;">[+]</span><span style="font-weight:bold;color:lime;"> Interesting environment variables ... </span><span style="font-weight:bold;color:yellow;">Yes</span>
<span style="font-weight:bold;color:yellow;">MYSQL_PASSWORD=S00perS3rect</span>
<span style="font-weight:bold;filter: contrast(70%) brightness(190%);color:dimgray;">HOME=/root
HOSTNAME=c6ed9f93d675
HOSTNAME=2eed50673b37
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
PWD=/
SHLVL=1</span>
Expand Down
Loading

0 comments on commit 2deee86

Please sign in to comment.