Repository files navigation

BDsploit (Big Data Exploitation and Post-exploitation Toolkit) is a series of scripts use to exploit and gain access on DC/OS and Marathon clusters. It also provides the ability to use Shodan API to search on the internet for exploitable clusters.

Please, only use this code if you can exploit the cluster.

Create virtualenv:

virtualenv -p python3 «env_name» && cd «env_name»

Activate virtualevn:

source bin/activate

Clone this project:

git clone https://github.com/b3d3c/BDsploit && cd BDsploit

Install requirements:

pip3 install -r requirements.txt

Copy configuration file and edit it:

cp conf_template.ini conf.ini

Script must be run as root:

sudo susource ../bin/activatepython3 bdsploit.py

It is neccessary to installpupy to use C&C capabilities.

This code is under BSD 3-Clause license.

Usage of BDsploit for attacking targets without prior mutual consent is illegal. It's the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program. Only use for educational purposes