CVE-2024-10220

The repository provides a detailed technical analysis of CVE-2024-10220, a Kubernetes gitRepo volume vulnerability allowing arbitrary command execution via malicious .hooks scripts. It includes a Python exploit PoC and deployment examples via Terraform/Ansible, but lacks functional exploit code.

This repository demonstrates CVE-2024-10220, a vulnerability in Kubernetes GitRepo volumes that allows arbitrary file write via malicious Git hooks during repository cloning. The provided YAML deploys a Pod with a GitRepo volume pointing to a crafted repository, triggering the exploit.

This repository contains a functional proof-of-concept exploit for CVE-2024-10220, targeting Kubernetes gitRepo volumes to achieve arbitrary command execution on nodes. The exploit uses malicious Git hooks to demonstrate the vulnerability.

The repository contains only a minimal README with no exploit code, technical details, or functional proof-of-concept. It is a placeholder with no substantive content.