jeremypruitt

Techniques

Tools

• nmap

Setup

1. Add ypuffy.htb to the hosts file so we can refer to the host by name

   $ echo "10.10.10.121 help.htb" >> /etc/hosts

jeremypruitt

Techniques

Tools

• nmap

Port Scan

1. Scan for ports and services

Use nmap to find available TCP ports quickly

jeremypruitt

Techniques

Tools

• nmap

Setup

1. Add ypuffy.htb to the hosts file so we can refer to the host by name

   $ echo "10.10.10.107 ypuffy.htb" >> /etc/hosts

jeremypruitt

Techniques

Tools

• nmap
• gobuster OR dirbuster OR dirb
• smbclient

Port Scan

1. Scan for ports and services

jeremypruitt

Techniques

• Port scanning
• Service enumeration
• Wordpress user enumeration
• IMAP commands
• Python coding
• HTTP Proxy: Intercept, modify, repeat

Tools

• nmap

jeremypruitt

Reminders

Remember to log all the things!

• Metasploit - spool /home//.msf3/logs/console.log
• Save contents from each terminal!
• Linux - script myoutput.txt # Type exit to stop

Setup

jeremypruitt

#!/usr/bin/env bash
set -e
set -o pipefail

# FORMATTING ###################################################################

DEFAULT=`tput sgr0`
BOLD=`tput bold`
RED=`tput setaf 1`
GREEN=`tput setaf 2`

jeremypruitt

Intro to API Server

The entire Kubernetes architecture is API driven, so the API server is the center of a Kubernetes cluster. All operations go through the API server, like accesssing data in etcd, accepting kubectl and controller requests, and more.

Get a list of API endpoints in given Kube cluster

$ curl -k https://127.0.0.1:6443/apis

Curl with cert auth

jeremypruitt

Lorem ipsum dolor...

jeremypruitt

KUBERNETES VAULT CLIENT POC WITH LOCAL VAULT AND MINIKUBE

This is a PoC of the kubernetes-vault-client using an instance of Vault running in -dev mode and local instance of minikube. The kubernetes-vault-client tool is run in an init container and uses Vault kubernetes auth to pull secrets from Vault and dump then into a volume that can be mounted in any container in a pod, preferably as an emptyDir with media: Memory. It is meant to be run on a laptop and is used to demonstrate the various configurations necessary to get it working.

Table of Contents

• OPTIONAL: Install & Start Minikube
• OPTIONAL: Install & Start Vault Server
• OPTIONAL: Create Policy for Humans & Secret Namespace
• OPTIONAL: Create Secret

0. Pepare Environment