CVE-2024-7387

The repository contains no functional exploit code, only a Dockerfile that lists files and a README redirecting to an external site. This is characteristic of a social engineering lure.

The repository contains no actual exploit code, only a Dockerfile that performs trivial operations and a README redirecting to an external site. This is a classic social engineering lure.

This repository contains a functional exploit for CVE-2024-7387, leveraging OpenShift's secret mounting mechanism to overwrite the `/usr/bin/cp` binary with a malicious script. The exploit chains this with a BuildConfig to execute arbitrary commands, ultimately granting SSH access to the worker node.

This PoC exploits a vulnerability in OpenShift by overwriting the `/usr/bin/cp` binary via a malicious secret, leading to arbitrary command execution during build processes. The exploit establishes an SSH backdoor on the worker node by injecting an SSH key into the authorized_keys file.