subpath-exploit | Writeup of CVE-2017-1002101 with sample exploit '' /escape

subpath-exploit is a Shell library. subpath-exploit has no bugs, it has no vulnerabilities, it has a Permissive License and it has low support. You can download it from GitHub.

After hearing about the issue and following this guide, I wanted to explore things a bit more. This repo contains a couple pod deployments and helper shell scripts that demonstrate the attack mechanism in the simplest way possible so that Kubernetes administrators and operators can fully understand the severity and potential risks. You must be an authenticated user or able to control a pod's spec/template at creation, so this escape is not likely going to be anonymous unless combined with other attacks like this.