$ tldr Kubelet API anónimo → kubectl POD malicioso → root
·
·
Operating system
Linux
Difficulty
Easy
Vector
Linux privesc
IP
10.10.11.133
Retirement date
2022-02-14
Skills
Kubernetes API Enumeration (kubectl) Kubelet API Enumeration (kubeletctl) Command Execution through kubeletctl on the containers Cluster Authentication (ca.crt/token files) with kubectl Creating YAML file for POD creation Executing commands on the new POD Reverse Shell through YAML file while deploying the POD
