Breaking the Kubernetes Kill Chain: Host Path Mount
191010 opie2
1. B
B
OpenPIE2 C D
2019/10/10
http://www.ossl.co.jp
TWITTER: http://twitter.com/satoruf
LINKEDIN: http://jp.linkedin.com/in/satorufunai/ja
SLIDESHARE: http://www.slideshare.net/sfunai
FACEBOOK: http://www.facebook.com/satoru.funai
Open
Programmable
Infrastructure
Environment
OSC2019.Enterprise
5. l R At
l i Cp s I h r
l Ld
l a a
l R A
l s h I ev
l O s g
l yIo n
l S O hc bl
) ) .. /0 / 1 (77 2 5
6. Rd o
O S SL
Open Programmable
Infrastructure Environment
6
wp
g
b
rl
a gI FE
F
o
m o
vs
Fe
E
. n
E
ES S
c P
h
0)
A 1
t
12
oO
( C 7 ( 00 12 1 / 7 / A
y
i o
7. l TPRL O
l 275 75 G) / I S
l ( 5 C:
: .11 :7A 5 ) 0: A 07A7 7 7
APACHE
TOMCAT
River
8. l % SO U b
l % ( % 5
l % % 5 %
l % ) 5 % %
l % %((
l % I4/a ) R V a
l de L c
. A = % . 133 0 7 = C / 2= C 2 C 9
9. l RnL n
l b hQ Lf T P
S
l V WO Lbv L g
l C C ACI 3 7 Lbv L M
l fh T
l 3/)0 )0, .7 A 31 )0 ) 3
l , ,
l V WO
l
l M Mp l
h Mv hM
f M o Mi
w g
CD ( /33 7 C 7 C , )AA 2 2 9
eL h c
y o (h k
eL h y
fn o eL h
Lov
a tf kg b ho eL h Lo
M bih
eL h Lhn
ia
eL hs nL
f M ho
eL hnhb
e
dLf
Lf
dLf
eL h
rko Lb
n
10. R
. )C 7 e
M
:B 033 B A ( 2 :BA 2 A D 7 10
Og a R
y
pu
1
r
ho
y
io
e
Og a R
y
pu
1
r
ho
y
io
e
Og a R
y
pu
1
r
ho
y
io
e
Nc
v
v
v
Nc
v
v
v
Lg
Nc e
d
e
Nc e
d
e
S e
s I
t
d Pbg tl
n
d
e
11. C I OR l
MT
L
r
c l
l
S l
S
I
o
t
o
ogp
t d
ia
(.
g
: A B : A B
en
r h b vn T A hy
s
) 0 ( 1 77 2 11
16. l n 0
l l t g pn
l n a d a
l v h l
l a d a
l n io
l C Cs g pn RU h l U
e Se el IVIV Se
l rs 0
l l t g pn v h l
l n C s
l n rs C
l y n rs l bg
pn d a e gis n rs
Segis Lg pn Ic e
l IVIV el Se O s SeU
h l
) A ) .. 12 1 5 3 (99 5 5 5
17. l L S
l ). . 0 9 AC I J
l RO I J
9 . . 2 ( 0 2 2 21
22. ) E : ) // 2 2 : A ( .: A . A C 22
l 0 1 7 : T IR O LS
2 7
Redmine'>)
Cmdbuild)
)
)
or
Redmine
Redmine
XRFC
X X X
)
)X
Redmine)
)
)
X
X
X
RFC01 RFC02
RFC03
RFC04 RFC05
RFC00
RFC06
RFC07
RFC08
RFC09 RFC10
RFC11
RFC12
RFC13
RFC14
)
23. l X g h d
l y0) 1 IP ) O dL ( ) B O d
l da nh oOa p ru v
l e h d
l y0) 1 IP ) O dL ( ) B O d
l 2 O S dO R Ine u G
l t s LO G
l giuag h d
l cua
l 1. I
CD l r
l M adn bG
( D A ( .11 A 7 0 A 07 7 C7 23
24. l R b I O C lAL s
l O bpo v a s
l b o I e d l s
l O S s
l
l gi aO nyt hlr b o
l g i c o
7 2 ) .7 7 1 ( 2 1 1 10 24
25. l ) 1 h
l ) 1 e ( E )E A 7BS P )
nocd I. 1 1 fM E) B B
2 28 B B 2 B 1 C dad
m rl b E ) ytgvR
i R pR
l 7 A OLR E) 1 h M ) y
tS I s P
) 8 B ) .11 2 2B A 0 8 BA 0 A C 25
26. l u pp b y 1 D SIO
J L V
l bc dean h
l hcb
l bs hlpa
l ( 0 ( 2 A 2 0 at t t
l ) 2
l 0
l o y
l vr itg o G
l v ab r Rd tr h
l 2 2
( C 7 ( .00 23 2 7 26
27. l h f a se R l h l t
y i c nO TS
l c
l g ta sey h M0 D7I
l 1 D , . D DI p hM bl hS
l v p hM v
l 61 7D A D p hM61 S
l M 24 ( ,A D
CID => ) 244 07 D7 D A , 3 => 3 D 27
a se h v )e
a se v cl a se
y t rc V o d e a se y
L ge
a se el
g V
a se l c
L e
a sele
a
c
w c
28. l
l v W b p
l s
l a b K
l
l r t
l a
l a y ) a
l KL
l OiLKo O c ( ( c oW g W OiLKo Vb iL o
l Lobi Oi W l S i O
l 1)
l n O 2 2 LoW bN
l Vb MNK 1 Wd Kc P Rho I
l e
l l Sd c R
( ( .11 A ) 0 A 0 A C 7 28
29. l ( IL ( Os SgrlIA
c yl RK S P
l (
l C
c pO a b
l TdC
( pO a b
l a b O. ) (
l o vh O e
7 .. 01 0 7 ( 2 7 29
c
o
T e
t
t
ni
30. l ( lC e
l c Tc O S c I v I y p
s ) s
l O S A s r
l c c o y
l d R S s
). . 2 (70 2 2 21 30
h
h ti
LS d bg
c S
a
g g
n
39. l td
l h vyr V g
l p nbS
l h v p
l w
l a Od L
l eR e nFs i
l eR e nF e
l eR e nFT V c
l 2 s I
l So Fs i
l So F e
l So FT V c
l D P OT b
l )P OT b
l .(1P OT b
l l M
l )
l .)2
l 02
l (1
( B ( .11 B A 0 BA 0 A C 7 39
42. l vR ad
l A5 ) 5 B MOS d l e rs
l ti C( ) l f
l f D go CcD bD n
l .(LOS d IO Pd h p
( B ( 00 12 1 5 5 5 A5 42
A5 ) 5 B
LDAP QueryD f
cD bD
43. l Ud in
l ) D B rP f nywKe I)0 Igh I VI 2I 0S
I LRou
l . 5B B5CDB 7D B 2 0 R t
l b sOMI). (ywOpv
l pv I Vcl
) A B D ) 22 5 B5D B C 7 1 DC 1 C B 43
) D B aV vCenter ServerVMware Infrastructure (VI)
SDK 2.5.0 API
Vcl
44. l e
l 1 ( nL b tr aU sE( 2Ecd E PURE.1E
O gUEU U p y
l W o IE( ) tr l
l l vMEi R h
( D B ( .11 B A 0 BA 0 A C 7 44
1S R
i R h
45. l tO c
l 2 CI rl dgno
l p I 2 CLa l ( ) Iei
( D A ( .00 A 5 A B 45
NMS
W
Z Wei
1hs
b
R
r La
46. l e
l D CMO L g tI av )0 hi R U 2
0 bl Pn y
l d pML D CN (P)- (Mos
) A C ) 22 5 A5C A B 1 CB 1 B A 46
SR b
cU
vSphere ESXi
nmap
snmp
WMI
ssh
os
. r
al
upW d
47. l t S ad
l ) D ) A5 C D B 5 L1 Ps I c l
NynpoPek v
l 2l L d R Wpo yl poPek h
l iM ( ) poM
l grO c b
( D B ( .11 B A 5 0 BA 0 A C 47
)
LLDP + SNMP V2/3
c b
48. l 7
l /A NnPg
l AIJ
l psadPi M CS. 21RO AJ
l ) E A
l AJ . 21RTZO
B D EIA C L IG AMcsk a uy
l CAL
l uyU csk a Ohlr xt
l C
l gf fbeoPpsa
l 0 EAJ AE
l v O smsip
l )0 (
l v y (
) GN A J ) 2 / J A I E CC A JI I L 48
49. k tw aUg
x
ES
x
Ui
LAJ(P 7
.AO JB
wnwgt
)
0 6 DA
P AM
e fg
UipUu
nwg
iUbrw
. 7
7AM MI
(J E A
6AM AM6LA
0 2 JEO MEJC
A 2EJA
OM
())
1EBAM T
4 GAM
pUb
lX u fmvUh
wlZ V owh W
d wvUh
jspUc
. 7y
( 6
EMOP )
LAJ6O G
. 4
2R MA
LAJ4
k tw
aUg
fm
vUh
S F J
x
jspUc
2 )PE
P JB
w
lZ
ACE OAM
JBEC A E AM
2 )
6 DA P AM
2 JEO MEJC
LTMECDO 66 1 M O MEA J ( ECDO A AM A 49
50. 7 2 ) .7 7 1 ( 2 1 1 10 50
I
(
HVOCJ
dt P MBCX
qswe -1 0- 1
28 2 . /
hc 3 HKV GS
l CQ OPS IGC
b nmf
3 32 27 34
1A
k qsf
VKRM G -L8 N4
Y 9 M J6 W083Q (
-2927W
cy sf GNP QGN
6 2 9
2 9
2 9 4
c mp mpc NJESP NJESP
9 pc CNJ )H CNJ )H .GO 9 ( .GO 9 ( .GO 9 ( .GO 9 ( .GO 9 ( .GO 9 (
zms XXX D
t c MPECM EPN MPECM EPN
XXX D
3 bt m ) )
h u 3
3 bt m
rwe s s 2. 2. 2. 2. 2. 2. 2. 2.
8 i u 2. 2. 2. 2. 2. 2. 2. 2.
8 i u_ 2. 2. 2. 2. 2. 2. 2. 2.
8 i u 2. 2. 2. 2. 2. 2. 2. 2.
t c 2. 2. 2. 2. 2. 2. 2. 2.
j3
vm t
wac
3 1
d s c s
o m
QCEIG2 Q
7Y 6
2
EV PN
EV PN
51. / -
l N I 1 K AI K H K >D wu .,LCE X o
l kt. sS .,LCE 0 gabR O
l / C
l (
l nx 71 Xr wu v
l M K I 71 EL K I 7BP C> E IM I CIKL E IM I 7 IK
AI LH C> M 5 M.1 2 . K K I
l 5 71 / A
l H K >D 71 D P K M >C I LKI
l M K I 5 e c H K >D h Rd
hc iplX yV
HPICABK ) 3 I K IC 1 > EE CABK IM 51
53. l A2 1 C2 hv gir I
l 1 C2 A2 k t r c
b a c
l A2 I 1 t r i 1 C2
Pa
l A2 1 d O 1 C2 b
a Uo UL Ma
l l n p SR
A2 k t r )ky s d L
c Vc
l wnr ) es n 00)( Pa
D 7 A 2 2A ) . 7 A . 53
54. l M( FK I 27 H F K C p tnVOjm p s
l H F K C X M( FK I i V yuV Sbhdacg k
l Pev Qro v R ly
(GHNIA K ( 77 0 GI KGIA .F DD A K IM 54
1
M( FK I
2GM
(DL K I
M( FK I
2GM NH IMA GI
M( FK I
) K ( FK I
IG K
/ N KGF
27
GIK IGLH
M( FK I
M)A C
M7 2
) K KGI
7 A
H F K C
D MGI LGK
2.(
M( FK I
H F K C
(AF I GDLE
H F K C
2 LKIGF
55. l g V 1./ 0 L bld bi
hn T
l 0 - ) yv2 VW NMT
l g V 1./ 0 p ac yveoT
SR LO I prtT sO
) ) .00 5 A ( / A / A C 55
56. l
l . D y rhpi ri plo d Dpl
o d D I plo d
riaev I
l plo d S Dplo d a D
bt oa D a a (
I
l
l Lcd S bt o n bd i
LKK
l L S D O RD In
LKK
l gi s SILD L
l L L I
C 8 A ) 022 34 3A 5 1 8 A 1 6 56
57. ) A C ) 22 - A C A B 1 CB 1 B AE 8 57
l
l dI Ih L ). (D 8 1 8 B D8 a S
0 a R a T
• nIlrIh ). (D 8 1 8 B
• c r ov y D8
l ds Il htIi be ha
T M a
l S P
l buIt nIl be h O
l c r ov a
l gh t T U Iph a
58. 58( 8 B ( 11 B A 0 8 BA 0 A D
• s
• t
• W
t p)
O bW p
lc p
.2
1 C B
1 D
v
2
2
)) n Fu Wa I d
.2
1 C B
1 D
v
RS
RS
RS
ermRS
hygKLRS
ioRS
u
N
)) n Fu Wa I d
59. l N OMS R
l 2 1, I L 1 1 W
) 7 A ) .00 2 2A ( / 7 A / C 59
60. -
l 0A (E WH c aH ) iH dglagSy
u HpQ ae sR oag nOR H oag
nP M vI
l c aWH/ 2.
l ) iWH(A 1 1
l dglagWHr t p hdg L i
A B 0 . 7 B B C - ( C C B 60
) ob n
r t
) i
dg
lag
61. l ch
l 1 A 2 / C 2 0 2
l kdEb JIg T R
l O a 0
l a E lch S Lei
) 7 A ) .00 2 2A ( / 7 A / C 61
62. l / 7QBJHC HCE OE
l H QT H DLSO V ej W
l x t bslV07 LJANHO )1 j i eV V
w Z v y j V j V
V21 )j asrW
l
l j V2ARA 7ENJ 2ARA CNHMP CNHMP 7LSENOGEJJ IARAT OCNHMPj
)71t dc t
l )71 io - c x p j V
j
l x X
l ux n h
l V V V V x
l 2AOMEN EMLNP n ABBHT AFHLO gj
l U j V7LOPFNE NACJE , ENREN .HNEBHNDi
l h
LMUNHFGP ( ABLNAPLNHEO 1 C )JJ HFGPO EOENRED 62
65. l ps
l La S d
l RA L a iRi
l lr h b
l c Le I lr
l vn
l e aiReco
l lro
l lr c
l e t La y
l e I CO S g
7 2 ) .7 7 1 ( 2 1 1 10 65
66. l Sc
l Si rc E
l J
l t i l
l s aol
l s c
l P
l V v
l eR V c
l h v
l I P
l OI OTI
l I
l e
l e
l . /.
. /.
B Sc
2019/10/10 Copyright 2017(C) OSS Laboratories Inc. All Rights Reserved 66
S j w
Dev x Ap B Jobc
67. J H B /
/
l g en cO
1 7 7A g hs C
mr os O f fm
l rce dkh
7 /1 / P
l f fm Cce p i
y Cmr os L
l mr os CL S
b lS y f fmR
I
l b h y Sb l C
k t S
l . va y Sb l C
k t r O
67
/ /
D C
/ /
P H
/ /
D C
M L
M L
va
/ /
PRB S H
7A
/ 0 /
( 7 ( .. /0 / 7 ) 1 7 A 2
68. C C
l h gm eO
1 7 7A h tair C n
eg
l a eg fki
7 /1 / P
l dplecdo s neg
C
l neg S CL Sdp
lS y Sneg R I
l d vi y Sdpl Ck
s S
l . b v y Sdpl Ck
s O
68
/
B DAMH
/
C L
/
B DAMH
J
J
b v
/
C L
7A
/ 0 /
( 7 ( .. /0 / 7 ) 1 7 A 2
69. B
l i nh r - 0 1
v c
l o x i nh r
RO
l - 0 1 v
i nh r
n u L
F olny
F) - C 7
l i nh rL
d i nh
r Pdc
l i nh rL
d i nh
r Pdc
FI g s t olny
F. . 2 7
l i nh r a
n uL b adc
l op op _
eScO
/
/
/
- 0 1
/
/
/
/
/
- 0 1
olny
g s t
olny
( C 7 ( 12 1 . 7 . A
70. B H
l R R A 2
c i b O t
v o
l S ce O c
erh p r O
l g edre
h C
lc i b S
L
O I
l ln hR y
s O
70
B
D
/ /
D
/ /
pa r
D
/ /
2
22
o
( ( ./ . 2 )70 2 2 21
73. ) C 7 A ) .00 2 2A / 7 A / B 73
S cd
e g
g
a Doh L
e b
i
O g
RM MI
O
i
m
0 1
( i
W i
eln
74. l ( ntL ( A l c
L Tg
l L ( A b d L s Ly
l lL c voIC y
l cLy T R
l A l pr l
Lae L O i hSR
). . 2 (70 2 2 21 74
75. l s
l bTh 7 VS.
l bTh9 S JC QN M M - 326 - (
1 JO9 (
l 8 S )
l pt ning y Tc ngmdV
l CI J ea gr TlV
l 54 4 7 vwo W
1 LRM E O , 1 9 6 A M O M N 4J 0HH E ON N M C 75
76. ( A 7 ( 01 0 7 2 .7 . 76
( ) 7 bl
hprn
L M
SB
B
I RO
B
a CSB e
SB dcD C
hprn B B
g
B
Bo
o SB c
L M i
bSB c
L M
B
77. ) D 7 A ) .00 2 2A / 7 A / C 77
) (B gdibc S c
gdLM I
M
WOS
cla
0 1
ib h
eb m R
78. ABIC 022 - AC AC 7 ( 1 1 CG 78
MSi
AC CA B
N O Ro
? B b
i
d sp b V
c
? Bi m
rn
2 ?B
2 ?B Wae
i
V
yl
V k
V h
.
)2 b
uv i
b
uv i
b i
m 0B
( L
B B
t
gw V
79. p
r
g Oh 1.
pb d
r
P S
ZRW
MOf
oiu g
sl
)A IC E ) /22 AC EAC 7 ( 1 E 1 CG 79
Ly
7 MOf ag
2 2
(0
e n c f
MOft oi
mx P S
Ph
v
Ph
OhW f
a
) A )A
+ E A
0
81. e v
BB C C
Z s
ip a
m c
cn Q
lswt
) (R I
DB A 7
R
v L
sdwt
v
2B C C Z s
b c
gS o
20
sd
wt
gS o
) (
/
r d
sdb ho
sdwt R
b cgS o
x
MO uR
Z A BB B
) A C ) .22 A C A B 1 CB 1 B A 7 81
e ls y
P
e
86. V h O p
eP Sci
g bh O
n p
JOdNZ ms g
TK
/Mi
tvl u p
eP Sci u
QaiZkrm
A .
E D C
ECD /
A
D /
EAA D
C
C
G
pkro //
/ E
A D
D
Tc p
7 2 ) .7 7 1 ( 2 1 1 10 86
RXOxpeTe
.
DCF
./
87. l
l ::AO
l 5 F I .27
l ) F GI G F?
l c
l 4 =F 27
l ) NNN G =FF GI?
l 207
l G 2 F =C kRpj u vsu Rm Swp h irRo tR
l p R
l ?AG
l 0 AF?
§ ?AG bxlRm 0 AF? anhx Ry Rmg Z c fe d
l 7=F L
§ L:P Z e ?AG m R c
l 7 AFC=F
§ 5P GF Z e ?AG m R
l = GF G
§ ?AG b xlRm G
l 5IG = =L
l ) IG = =L AG
l / F? A 2LFAF A G = /I A = /I F
l wp h irRo
G PIA? ( 477 1 :GI GIA= 0F A? = =IM= 87
88. l F .-
l F O R tc alu dfin
l .C F F
l tc alu
l F F E
l tc
l - 7
l keo agLdpu
l
l E F E ) O R tc alu dfin
l CE E
l ( 1 FD E lLf QT 2. ab N f rLmucdfin
l D -
l . P Tr shanf rLmucdfin
l D CEA K D D E S v y
(CD E ( 0 . 7CE CE F F F EI 88
89. l 72 IA
l 2/2 P R fto egis
l y M drNkO
l ) C
l 0 . jNhP SM fto
egis
l c Z/22M bpetv Z
l 7 C 77
l x nflg m NetvP SM 77 R fto
egisM drNkO
l )
l 7 C P Sfto egis
l 1IC
l 2 A L/ fto egisM O
l aNf vkug M C1 W T fto
( L H ( /22 7 H C AA 1 H 1 J 89
90. l
l . 1 C S( CFD L
l 7
l . 1 C ( CFD L
l 1
l 7 C ( CFD LPI
l )01 2
l 7 S R DOCFD LPI
l 0 0 0
l . 1 S R DOCFD LPI
l A 2
l . 1 IL DOCFD LPI
7 01 0 2 . 7 . A 90
91. l 0 1/OD
l gjtlnSsmvVd
l I
l C ?IG I I ?IG M D C - =BA LO LD OA D LO LD OA )
l smvVdS &bgjtl _ S ba a
l 7 A0 1/
l C I A?G ILB
l h cu r
l D ID
l C D ID ILB
l smvVe Siola 2 ?I D B
l 9= C
l C L= C = ABLIBLIO ?IG
l gjtlqpSsmvr
l 8
l C B D LIEA? ILB
l gjtlqpSsmvr
0I RLDBC &( 0 7:: = IL= ILDAM ? . 9DBC M 9AMALPA 91
92. l . 7 C
l . C7 W G NR I
l M OL SP G 2 0 NR
l .(1 7 C A )
l /7A GM OL
( A C ( .11 A C A 7 0 C 07 7A 7 92
93. l .
l .S I T( . LMP
l C R C O
l 7
l 1 C R
7 .. )01 0 7 ( 2 7 A 93
94. l IJ
l d
l PS
l b OCL
l c OCL
l 8 a
l SR L
l (.
l (. 0 (. /
l (. 1A1 1A1 0 8 . 7 / 2 . .7
) 8 7 ) 00 12 1 8 ( /8 7 / A 94