sagitz
@sagitz_
I had a lot of fun working on this research!
* Unauthenticated RCE? ✅
* Overlooked attack vector in Kubernetes? ✅
* Nginx quirks? ✅
* Stable & reliable exploit? ✅
Check out the thread for details about the vulnerability we found in Ingress Nginx Controller 👇
* Unauthenticated RCE? ✅
* Overlooked attack vector in Kubernetes? ✅
* Nginx quirks? ✅
* Stable & reliable exploit? ✅
Check out the thread for details about the vulnerability we found in Ingress Nginx Controller 👇
0:34
Nir Ohfeld@nirohfeld · Mar 25, 2025We (+@sagitz_ @ronenshh @hillai) found a series of unauthenticated RCEs in core @kubernetesio project "Ingress-NGINX".
The impact?
From zero permissions ➡️ to complete cluster takeover 🤯
This is the story of #IngressNightmare 🧵⬇️
The impact?
From zero permissions ➡️ to complete cluster takeover 🤯
This is the story of #IngressNightmare 🧵⬇️
Open quoted post →
3 112