$ tldr Kubelet API anónimo → kubectl POD malicioso → root
Linux · Fácil
SteamCloud
Writeups verificados de la máquina SteamCloud de Hack The Box
Documentation Index
Fetch the complete documentation index at: /llms.txt
Use this file to discover all available pages before exploring further.
Writeups verificados de la máquina SteamCloud de Hack The Box
$ tldr Kubelet API anónimo → kubectl POD malicioso → root
| · | · |
|---|---|
| Sistema operativo | Linux |
| Dificultad | Fácil |
| Vector | Linux privesc |
| IP | 10.10.11.133 |
| Fecha de retirada | 2022-02-14 |
| Skills | Kubernetes API Enumeration (kubectl) Kubelet API Enumeration (kubeletctl) Command Execution through kubeletctl on the containers Cluster Authentication (ca.crt/token files) with kubectl Creating YAML file for POD creation Executing commands on the new POD Reverse Shell through YAML file while deploying the POD |