{"uuid": "5eab7c36-5144-4615-ba9a-2302553f669e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2023", "type": "seen", "source": "https://t.me/hacking_Attack/11441", "content": "1 Introduction\n  Metarget = meta- + target, a framework providing automatic constructions of vulnerable infrastructures, used to deploy simple or complicated vulnerable cloud native targets swiftly and automatically.  \n1.1 Why Metarget?\n  During security researches, we might find that the deployment of vulnerable environment often takes much time, while the time spent on testing PoC or ExP is comparatively short. In the field of cloud native security, thanks to the complexity of cloud native systems, this issue is more terrible.  There are already some excellent security projects like Vulhub (https://github.com/vulhub/vulhub), VulApps (https://github.com/Medicean/VulApps) in the open-source community, which pack vulnerable scenes into container images, so that researchers could utilize them and deploy scenes quickly.  However, these projects mainly focus on vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) in applications. What if we need to study the vulnerabilities in the infrastructures like Docker, Kubernetes and even Linux kernel?  Hence, we develop Metarget and hope to solve the deployment issue above to some extent. Furthermore, we also expect that Metarget could help to construct multilayer vulnerable cloud native scenes automatically.  \n1.2 Install Vulnerability!\n  In this project, we come up with concepts like installing vulnerabilities and installing vulnerable scenes. Why not install vulnerabilities just like installing softwares? We can do that, because our goals are security research and offensive security.  To be exact, we expect that:    metarget cnv install cve-2019-5736 will install Docker with CVE-2019-5736 onto the server.  metarget cnv install cve-2018-1002105 will install Kubernetes with CVE-2018-1002105 onto the server.  metarget cnv install kata-escape-2020 will install Kata-containers with CVE-2020-2023/2025/2026 onto the server.  metarget cnv install cve-2016-5195 will install a kernel with DirtyCoW into the server.    It's cool, right? No more steps. No RTFM. Execute one command and enjoy your coffee.  Furthermore, we expect that:    with Metarget's help, ethical hackers are able to deploy simple or complicated cloud native targets swiftly and learn by hacking cloud native environments.  metarget appv install dvwa will install a DVWA (https://github.com/digininja/DVWA) target onto our vulnerable infrastructure.  metarget appv install thinkphp-5-0-23-rce --external will install a ThinkPHP RCE vulnerability (https://www.kitploit.com/search/label/Vulnerability) with NodePort service onto our vulnerable infrastructure.    You can just run 5 commands below after installing a new Ubuntu and obtain a multi-layer vulnerable scene:  ./metarget cnv install cve-2016-5195 # container escape with dirtyCoW\n./metarget cnv install cve-2019-5736 # container escape with docker\n./metarget cnv install cve-2018-1002105 # kubernetes single-node cluster with cve-2018-1002105\n./metarget cnv install privileged-container # deploy a privileged container\n./metarget appv install dvwa --external # deploy dvwa target  RCE, container escape, lateral movement, persistence, they are yours now.  More awesome functions are coming! Stay tuned :)  Note:  Thie project aims to provide vulnerable scenes for security research. The security of scenes generated is not guaranteed. It is NOT recommended to deploy components or scenes with Metarget on the Internet.  \n2 Usage\n  \n2.1 Basic Usage\n  usage: metarget [-h] [-v] subcommand ...\n\nautomatic constructions of vulnerable infrastructures\n\npositional arguments:\n  subcommand     description\n    gadget       cloud native gadgets (docker/k8s/...) management\n    cnv          cloud native vulnerabilities management\n    appv         application vulnerabilities management\n\noptional arguments:\n  -h, --help     show this help message and exit\n  -v, --version  show program's version number and exit\n  Run ./metarget gadget list to see cloud native components supported currently.", "creation_timestamp": "2026-09-02T01:03:16.683038Z"}