<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Kubernetes on d3bo</title><link>https://d3bo.eu/en/tags/kubernetes/</link><description>Recent content in Kubernetes on d3bo</description><generator>Hugo -- gohugo.io</generator><language>en</language><copyright>Copyright (c) 2025 Hyas</copyright><lastBuildDate>Tue, 18 Jun 2024 00:00:00 +0000</lastBuildDate><atom:link href="https://d3bo.eu/en/tags/kubernetes/index.xml" rel="self" type="application/rss+xml"/><item><title>Unobtainium</title><link>https://d3bo.eu/en/writeups/hackthebox/unobtainium/</link><pubDate>Tue, 18 Jun 2024 00:00:00 +0000</pubDate><guid>https://d3bo.eu/en/writeups/hackthebox/unobtainium/</guid><description>We start by exploiting a prototype pollution vulnerability. Then we leverage a command injection CVE to get a shell in a container. For privilege escalation, we pivot between Kubernetes containers and analyze the secrets of a namespace. Finally, using the permission to create pods, we break out of the container.</description></item></channel></rss>