Skip to content

Latest commit

 

History

History
32 lines (22 loc) · 616 Bytes

File metadata and controls

32 lines (22 loc) · 616 Bytes

Mount me 2

Red Challenge

Flag is in /home/docker/mount2 directory at node.

❯ kubens mountme2

❯ kubectl get pods
NAME                      READY   STATUS    RESTARTS   AGE
victim-7c5745b4dc-42mx8   1/1     Running   0          53m

❯ kubectl exec -it victim-7c5745b4dc-42mx8 bash
I have no name!@victim-7c5745b4dc-42mx8:/$
Hint 1 hostPath mount is prohibited by Gatekeeper.
Hint 2 Namespace

Blue Challenge

  • Disable create privileged container with OPA
  • Detect create privileged container with falco