mirror of
https://github.com/lunchcat/sif.git
synced 2026-07-28 14:37:01 -07:00
detect an anonymously reachable kubeflow pipelines apiserver, whose same api accepts pipeline run submission with an attacker-supplied workflow manifest (arbitrary container execution), and a metaflow metadata service leaking flow and owner enumeration. match distinctive snake_case json keys with status 200, fail closed on empty instances to avoid the bare-substring false-positive class.