$ tldr Kubelet API anónimo → kubectl POD malicioso → root
Linux · Easy
SteamCloud
Verified writeups for the SteamCloud machine of Hack The Box
Documentation Index
Fetch the complete documentation index at: /llms.txt
Use this file to discover all available pages before exploring further.
Verified writeups for the SteamCloud machine of Hack The Box
$ tldr Kubelet API anónimo → kubectl POD malicioso → root
| · | · |
|---|---|
| Operating system | Linux |
| Difficulty | Easy |
| Vector | Linux privesc |
| IP | 10.10.11.133 |
| Retirement date | 2022-02-14 |
| Skills | Kubernetes API Enumeration (kubectl) Kubelet API Enumeration (kubeletctl) Command Execution through kubeletctl on the containers Cluster Authentication (ca.crt/token files) with kubectl Creating YAML file for POD creation Executing commands on the new POD Reverse Shell through YAML file while deploying the POD |