CVE-2025-1097

This repository contains a functional exploit for CVE-2025-1097, targeting unauthenticated RCE in the Ingress NGINX Controller for Kubernetes. The exploit compiles a shared object with a reverse shell payload, uploads it via a manipulated HTTP request, and brute-forces file descriptors to trigger execution.

This repository contains a functional exploit for CVE-2025-1907, targeting Kubernetes ingress-nginx. The exploit leverages a vulnerability in the handling of HTTP requests to achieve remote code execution by manipulating temporary files and admission webhook configurations.

This PoC exploits CVE-2025-1097, a vulnerability in Kubernetes Ingress, by sending a maliciously crafted AdmissionReview request. The exploit uses a base64-encoded payload to achieve remote code execution (RCE) on the target system.

This exploit demonstrates a file descriptor injection vulnerability in the Ingress-NGINX Admission Controller, leading to remote code execution by uploading a malicious shared object and brute-forcing file descriptors.