317 lines
16 KiB
JSON
317 lines
16 KiB
JSON
[
|
|
{
|
|
"timestamp": "2026-10-12T20:27:02.752Z",
|
|
"category": "Environment",
|
|
"testName": "Container Identity",
|
|
"status": "INFO",
|
|
"details": "root\nuid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel),11(floppy),20(dialout),26(tape),27(video)\nclient-terminal-0f1fe89209a8-v2-58f99dfc8b-rjnlw"
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:02.893Z",
|
|
"category": "Environment",
|
|
"testName": "Network Interfaces",
|
|
"status": "INFO",
|
|
"details": "1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000\n link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00\n inet 127.0.0.1/8 scope host lo\n valid_lft forever preferred_lft forever\n inet6 ::1/128 scope host \n valid_lft forever preferred_lft forever\n2: eth0@if43491: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1250 qdisc noqueue state UP qlen 1000\n link/ether a6:44:41:9e:20:3b brd ff:ff:ff:ff:ff:ff\n inet 10.42.5.98/24 brd 10.42.5.255 scope global eth0\n valid_lft forever preferred_lft forever"
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:03.028Z",
|
|
"category": "Environment",
|
|
"testName": "Routing Table",
|
|
"status": "INFO",
|
|
"details": "default via 10.42.5.1 dev eth0 \n10.42.0.0/16 via 10.42.5.1 dev eth0 \n10.42.5.0/24 dev eth0 scope link src 10.42.5.98"
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:03.192Z",
|
|
"category": "Environment",
|
|
"testName": "DNS Configuration",
|
|
"status": "INFO",
|
|
"details": "search d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local svc.cluster.local cluster.local cs221.mtl2.ca.leaseweb.net\nnameserver 10.43.0.10\noptions ndots:5"
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:03.430Z",
|
|
"category": "Internal DNS",
|
|
"testName": "Short Hostname Resolution (test-redis)",
|
|
"status": "FAIL",
|
|
"details": {
|
|
"command": "nslookup test-redis",
|
|
"output": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find test-redis.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local: NXDOMAIN\n\n** server can't find test-redis.svc.cluster.local: NXDOMAIN\n\n** server can't find test-redis.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local: NXDOMAIN\n\n** server can't find test-redis.svc.cluster.local: NXDOMAIN\n\n** server can't find test-redis.cluster.local: NXDOMAIN\n\n** server can't find test-redis.cluster.local: NXDOMAIN\n\n** server can't find test-redis.cs221.mtl2.ca.leaseweb.net: NXDOMAIN\n\n** server can't find test-redis.cs221.mtl2.ca.leaseweb.net: NXDOMAIN",
|
|
"exitCode": 1
|
|
}
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:03.869Z",
|
|
"category": "Internal DNS",
|
|
"testName": "Resolver Lookup (test-redis)",
|
|
"status": "FAIL",
|
|
"details": "ping: bad address 'test-redis'"
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:04.086Z",
|
|
"category": "Internal DNS",
|
|
"testName": "Kubernetes FQDN Resolution",
|
|
"status": "FAIL",
|
|
"details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find test-redis.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local: NXDOMAIN\n\n** server can't find test-redis.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local: NXDOMAIN"
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:04.261Z",
|
|
"category": "Internal DNS Pattern Check",
|
|
"testName": "test-redis.mesh",
|
|
"status": "NXDOMAIN",
|
|
"details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find test-redis.mesh: NXDOMAIN\n\n** server can't find test-redis.mesh: NXDOMAIN"
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:04.422Z",
|
|
"category": "Internal DNS Pattern Check",
|
|
"testName": "test-redis.dns-tcp-test.mesh",
|
|
"status": "NXDOMAIN",
|
|
"details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find test-redis.dns-tcp-test.mesh: NXDOMAIN\n\n** server can't find test-redis.dns-tcp-test.mesh: NXDOMAIN"
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:04.565Z",
|
|
"category": "Internal DNS Pattern Check",
|
|
"testName": "test-redis.local",
|
|
"status": "NXDOMAIN",
|
|
"details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find test-redis.local: NXDOMAIN\n\n** server can't find test-redis.local: NXDOMAIN"
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:04.797Z",
|
|
"category": "Internal DNS Pattern Check",
|
|
"testName": "test-redis.internal",
|
|
"status": "NXDOMAIN",
|
|
"details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find test-redis.internal: NXDOMAIN\n\n** server can't find test-redis.internal: NXDOMAIN"
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:04.974Z",
|
|
"category": "TCP Connectivity",
|
|
"testName": "TCP Port 6379 Probe via DNS Hostname",
|
|
"status": "FAIL",
|
|
"details": {
|
|
"command": "nc -z -w 3 test-redis 6379",
|
|
"output": "nc: bad address 'test-redis'",
|
|
"exitCode": 1
|
|
}
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:05.192Z",
|
|
"category": "TCP Protocol",
|
|
"testName": "Redis Raw TCP PING/PONG",
|
|
"status": "FAIL",
|
|
"details": {
|
|
"command": "printf \"*1\\r\\n\\$4\\r\\nPING\\r\\n\" | nc -w 3 test-redis 6379",
|
|
"output": "nc: bad address 'test-redis'",
|
|
"exitCode": 1
|
|
}
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:15.200Z",
|
|
"category": "TCP Data Integrity",
|
|
"testName": "Redis State Storage & Retrieval via Raw TCP",
|
|
"status": "PASS",
|
|
"details": {
|
|
"output": "client-terminal-0f1fe89209a8-v2-58f99dfc8b-rjnlw:~# \r\n\rclient-terminal-0f1fe89209a8-v2-58f99dfc8b-rjnlw:~# printf \"*3\\r\\n\\$3\\r\\nSET\\r\\n\\$12\\r\\nghaymah_test\\r\\n\\$11\\r\\nOK_TCP_PASS\\r\\n\" | nc -w 3 test-redis 6379\r\n\rnc: bad address 'test-redis'\r\nclient-terminal-0f1fe89209a8-v2-58f99dfc8b-rjnlw:~# printf \"*2\\r\\n\\$3\\r\\nGET\\r\\n\\$12\\r\\nghaymah_test\\r\\n\" | nc -w 3 test-redis 6379\r\n\rnc: bad address 'test-redis'\r\nclient-terminal-0f1fe89209a8-v2-58f99dfc8b-rjnlw:~# ; echo __RET__$?_ma3g0t__END__\r\n\rbash: syntax error near unexpected token `;'\r\nclient-terminal-0f1fe89209a8-v2-58f99dfc8b-rjnlw:~#",
|
|
"exitCode": -1
|
|
}
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:15.438Z",
|
|
"category": "Isolation",
|
|
"testName": "Cross-Project DNS: auth-deploy",
|
|
"status": "BLOCKED (SECURE)",
|
|
"details": {
|
|
"target": "auth-deploy",
|
|
"output": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find auth-deploy.svc.cluster.local: NXDOMAIN\n\n** server can't find auth-deploy.cluster.local: NXDOMAIN\n\n** server can't find auth-deploy.svc.cluster.local: NXDOMAIN\n\n** server can't find auth-deploy.cluster.local: NXDOMAIN\n\n** server can't find auth-deploy.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local: NXDOMAIN\n\n** server can't find auth-deploy.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local: NXDOMAIN\n\n** server can't find auth-deploy.cs221.mtl2.ca.leaseweb.net: NXDOMAIN\n\n** server can't find auth-deploy.cs221.mtl2.ca.leaseweb.net: NXDOMAIN",
|
|
"exitCode": 1
|
|
}
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:15.686Z",
|
|
"category": "Isolation",
|
|
"testName": "Cross-Project DNS: auth-deploy.mesh",
|
|
"status": "BLOCKED (SECURE)",
|
|
"details": {
|
|
"target": "auth-deploy.mesh",
|
|
"output": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find auth-deploy.mesh: NXDOMAIN\n\n** server can't find auth-deploy.mesh: NXDOMAIN",
|
|
"exitCode": 1
|
|
}
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:15.822Z",
|
|
"category": "Isolation",
|
|
"testName": "Cross-Project DNS: auth-deploy.local",
|
|
"status": "BLOCKED (SECURE)",
|
|
"details": {
|
|
"target": "auth-deploy.local",
|
|
"output": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find auth-deploy.local: NXDOMAIN\n\n** server can't find auth-deploy.local: NXDOMAIN",
|
|
"exitCode": 1
|
|
}
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:16.062Z",
|
|
"category": "Isolation",
|
|
"testName": "Cross-Project DNS: scanner-clean",
|
|
"status": "BLOCKED (SECURE)",
|
|
"details": {
|
|
"target": "scanner-clean",
|
|
"output": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find scanner-clean.svc.cluster.local: NXDOMAIN\n\n** server can't find scanner-clean.cluster.local: NXDOMAIN\n\n** server can't find scanner-clean.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local: NXDOMAIN\n\n** server can't find scanner-clean.cluster.local: NXDOMAIN\n\n** server can't find scanner-clean.svc.cluster.local: NXDOMAIN\n\n** server can't find scanner-clean.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local: NXDOMAIN\n\n** server can't find scanner-clean.cs221.mtl2.ca.leaseweb.net: NXDOMAIN\n\n** server can't find scanner-clean.cs221.mtl2.ca.leaseweb.net: NXDOMAIN",
|
|
"exitCode": 1
|
|
}
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:16.203Z",
|
|
"category": "Isolation",
|
|
"testName": "Cross-Project DNS: scanner-clean.mesh",
|
|
"status": "BLOCKED (SECURE)",
|
|
"details": {
|
|
"target": "scanner-clean.mesh",
|
|
"output": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find scanner-clean.mesh: NXDOMAIN\n\n** server can't find scanner-clean.mesh: NXDOMAIN",
|
|
"exitCode": 1
|
|
}
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:16.340Z",
|
|
"category": "Tenant Isolation",
|
|
"testName": "Cross-Tenant DNS: kubernetes.default.svc",
|
|
"status": "BLOCKED",
|
|
"details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find kubernetes.default.svc: NXDOMAIN\n\n** server can't find kubernetes.default.svc: NXDOMAIN"
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:16.490Z",
|
|
"category": "Tenant Isolation",
|
|
"testName": "Cross-Tenant DNS: metadata.google.internal",
|
|
"status": "BLOCKED",
|
|
"details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find metadata.google.internal: NXDOMAIN\n\n** server can't find metadata.google.internal: NXDOMAIN"
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:16.676Z",
|
|
"category": "Tenant Isolation",
|
|
"testName": "Cross-Tenant DNS: admin-panel",
|
|
"status": "BLOCKED",
|
|
"details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find admin-panel.cluster.local: NXDOMAIN\n\n** server can't find admin-panel.svc.cluster.local: NXDOMAIN\n\n** server can't find admin-panel.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local: NXDOMAIN\n\n** server can't find admin-panel.svc.cluster.local: NXDOMAIN\n\n** server can't find admin-panel.cluster.local: NXDOMAIN\n\n** server can't find admin-panel.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local: NXDOMAIN\n\n** server can't find admin-panel.cs221.mtl2.ca.leaseweb.net: NXDOMAIN\n\n** server can't find admin-panel.cs221.mtl2.ca.leaseweb.net: NXDOMAIN"
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:16.817Z",
|
|
"category": "Tenant Isolation",
|
|
"testName": "Cross-Tenant DNS: backend.internal",
|
|
"status": "BLOCKED",
|
|
"details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find backend.internal: NXDOMAIN\n\n** server can't find backend.internal: NXDOMAIN"
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:16.960Z",
|
|
"category": "Tenant Isolation",
|
|
"testName": "Cross-Tenant DNS: database.default",
|
|
"status": "BLOCKED",
|
|
"details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find database.default: NXDOMAIN\n\n** server can't find database.default: NXDOMAIN"
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:26.975Z",
|
|
"category": "Network Isolation",
|
|
"testName": "Direct IP Probing: 10.43.0.1",
|
|
"status": "BLOCKED",
|
|
"details": {
|
|
"ip": "10.43.0.1",
|
|
"exitCode": -1
|
|
}
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:36.987Z",
|
|
"category": "Network Isolation",
|
|
"testName": "Direct IP Probing: 10.43.0.10",
|
|
"status": "BLOCKED",
|
|
"details": {
|
|
"ip": "10.43.0.10",
|
|
"exitCode": -1
|
|
}
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:47.011Z",
|
|
"category": "Network Isolation",
|
|
"testName": "Direct IP Probing: 10.42.5.1",
|
|
"status": "BLOCKED",
|
|
"details": {
|
|
"ip": "10.42.5.1",
|
|
"exitCode": -1
|
|
}
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:27:57.025Z",
|
|
"category": "Network Isolation",
|
|
"testName": "Direct IP Probing: 10.100.0.1",
|
|
"status": "BLOCKED",
|
|
"details": {
|
|
"ip": "10.100.0.1",
|
|
"exitCode": -1
|
|
}
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:28:07.031Z",
|
|
"category": "Network Isolation",
|
|
"testName": "Direct IP Probing: 10.100.0.2",
|
|
"status": "BLOCKED",
|
|
"details": {
|
|
"ip": "10.100.0.2",
|
|
"exitCode": -1
|
|
}
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:28:17.038Z",
|
|
"category": "Network Isolation",
|
|
"testName": "Direct IP Probing: 172.17.0.1",
|
|
"status": "BLOCKED",
|
|
"details": {
|
|
"ip": "172.17.0.1",
|
|
"exitCode": -1
|
|
}
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:28:27.053Z",
|
|
"category": "Network Isolation",
|
|
"testName": "Direct IP Probing: 169.254.169.254",
|
|
"status": "BLOCKED",
|
|
"details": {
|
|
"ip": "169.254.169.254",
|
|
"exitCode": -1
|
|
}
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:28:37.063Z",
|
|
"category": "Network Enumeration",
|
|
"testName": "Port Scan test-redis",
|
|
"status": "COMPLETED",
|
|
"details": "client-terminal-0f1fe89209a8-v2-58f99dfc8b-rjnlw:~# for p in 22 53 80 443 3000 4000 5432 6379 8080 9000; do\r\n\r> nc -z -w 1 test-redis $p && echo \"PORT $p OPEN\" || echo \"PORT $p CLOSED\"\r\n\r> done\r\n\rnc: bad address 'test-redis'\r\nPORT 22 CLOSED\r\nnc: bad address 'test-redis'\r\nPORT 53 CLOSED\r\nnc: bad address 'test-redis'\r\nPORT 80 CLOSED\r\nnc: bad address 'test-redis'\r\nPORT 443 CLOSED\r\nnc: bad address 'test-redis'\r\nPORT 3000 CLOSED\r\nnc: bad address 'test-redis'\r\nPORT 4000 CLOSED\r\nnc: bad address 'test-redis'\r\nPORT 5432 CLOSED\r\nnc: bad address 'test-redis'\r\nPORT 6379 CLOSED\r\nnc: bad address 'test-redis'\r\nPORT 8080 CLOSED\r\nnc: bad address 'test-redis'\r\nPORT 9000 CLOSED\r\nclient-terminal-0f1fe89209a8-v2-58f99dfc8b-rjnlw:~# ; echo __RET__$?_iwjsdj__END__\r\n\rbash: syntax error near unexpected token `;'\r\nclient-terminal-0f1fe89209a8-v2-58f99dfc8b-rjnlw:~#"
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:28:38.002Z",
|
|
"category": "Dual Routing",
|
|
"testName": "Outbound Internet Access (Egress)",
|
|
"status": "PASS",
|
|
"details": "{\n \"origin\": \"184.107.141.203\"\n}"
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:28:38.269Z",
|
|
"category": "DNS Routing",
|
|
"testName": "External DNS Resolution (google.com)",
|
|
"status": "PASS",
|
|
"details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\nNon-authoritative answer:\nName:\tgoogle.com\nAddress: 2607:f8b0:4020:c07::66\nName:\tgoogle.com\nAddress: 2607:f8b0:4020:c07::64\nName:\tgoogle.com\nAddress: 2607:f8b0:4020:c07::71\nName:\tgoogle.com\nAddress: 2607:f8b0:4020:c07::8b\n\nNon-authoritative answer:\nName:\tgoogle.com\nAddress: 64.233.178.138\nName:\tgoogle.com\nAddress: 64.233.178.101\nName:\tgoogle.com\nAddress: 64.233.178.139\nName:\tgoogle.com\nAddress: 64.233.178.113\nName:\tgoogle.com\nAddress: 64.233.178.102\nName:\tgoogle.com\nAddress: 64.233.178.100"
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:28:38.432Z",
|
|
"category": "DNS Routing",
|
|
"testName": "External DNS Resolution (github.com)",
|
|
"status": "PASS",
|
|
"details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n\nName:\tgithub.com\nAddress: 140.82.112.3"
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:28:38.594Z",
|
|
"category": "DNS Routing",
|
|
"testName": "External DNS Resolution (cloudflare.com)",
|
|
"status": "PASS",
|
|
"details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\nNon-authoritative answer:\nName:\tcloudflare.com\nAddress: 104.16.133.229\nName:\tcloudflare.com\nAddress: 104.16.132.229\n\nNon-authoritative answer:\nName:\tcloudflare.com\nAddress: 2606:4700::6810:84e5\nName:\tcloudflare.com\nAddress: 2606:4700::6810:85e5"
|
|
},
|
|
{
|
|
"timestamp": "2026-10-12T20:28:38.769Z",
|
|
"category": "DNS Leak Detection",
|
|
"testName": "Non-existent Mesh Domain Query",
|
|
"status": "SECURE (NXDOMAIN)",
|
|
"details": "Server:\t\t10.43.0.10\nAddress:\t10.43.0.10:53\n\n** server can't find leak-test-nonexistent-internal-ghaymah.mesh: NXDOMAIN\n\n** server can't find leak-test-nonexistent-internal-ghaymah.mesh: NXDOMAIN"
|
|
}
|
|
] |