CVE-2020-8559

This repository provides a functional proof-of-concept exploit for CVE-2020-8559, which allows an attacker with root access on a Kubernetes node to execute commands on other containers in the cluster by leveraging HTTP redirects in the kubelet server. The exploit involves modifying the kubelet binary to send malicious 302 redirects when specific API paths are accessed.

This repository contains a functional exploit for CVE-2020-8559, which manipulates iptables to intercept and redirect Kubernetes kubelet traffic, bypassing authentication by rewriting HTTP responses. The script uses OpenSSL to ferry TLS connections and modify response codes to achieve unauthorized access.