reverse-skills-max: initial public release (restored, redacted, hardened)

This commit is contained in:
baradok609hecl1pq6qi
2026-10-20 02:17:15 +03:00
commit da24c2bd20
2227 changed files with 443931 additions and 0 deletions

View File

@@ -0,0 +1,16 @@
# Cloud / K8s 检查清单(精简)
## IMDS
- [ ] SSRF 是否可达 169.254.169.254
- [ ] 是否强制 IMDSv2
- [ ] 返回的 IAM 角色权限面
## K8s 高危
- [ ] cluster-admin 绑定过多
- [ ] secrets 明文环境变量
- [ ] privileged + hostPID/hostPath 组合
- [ ] 匿名 auth / insecure apiserver 端口
## 容器
- [ ] 以 root 运行
- [ ] 可加载内核模块 / docker.sock 挂载