Kubernetes Goat [Part 2 - Sensitive keys in codebases]

Target (http://127.0.0.1:1230)

Thu thập aws_access_key_id, aws_secret_access_key và k8s_goat_flag.

Method 1

Sử dụng gitDump để dump

git checkout .

Checkout xong dùng vscode để check commit => Tìm thấy Sensitive Information

Method 2

Truy cập vào pod rồi xem history

└─$ kubectl get pods   
NAME                                              READY   STATUS    RESTARTS   AGE
batch-check-job-ffmlv                             1/1     Running   0          42m
build-code-deployment-84fb858df9-6tm4d            1/1     Running   0          42m
hidden-in-layers-jlndf                            1/1     Running   0          42m
internal-proxy-deployment-c59c45d94-49rdj         2/2     Running   0          42m
kubernetes-goat-home-deployment-cd46cd955-4wp7r   1/1     Running   0          42m
poor-registry-deployment-7b75fbd7-b52p5           1/1     Running   0          42m
system-monitor-deployment-866f697c75-8rqz8        1/1     Running   0          42m

└─$ kubectl exec -it build-code-deployment-84fb858df9-6tm4d -- sh
/app # ls -la
total 11580
drwxrwxr-x    4 1000     1000          4096 May 19  2022 .
drwxr-xr-x    1 root     root          4096 Apr 15 03:47 ..
drwxrwxr-x    8 1000     1000          4096 May 19  2022 .git
-rw-rw-r--    1 1000     1000           180 Nov  6  2020 README.md
-rwxrwxr-x    1 1000     1000      11773672 Nov  8  2020 app
-rw-rw-r--    1 1000     1000           105 Nov  6  2020 go.mod
-rw-rw-r--    1 1000     1000         49893 Nov  6  2020 go.sum
-rw-rw-r--    1 1000     1000           420 Nov  6  2020 main.go
drwxrwxr-x    2 1000     1000          4096 May 19  2022 views

Dùng tool TruffleHog để scan secrets trong source code

trufflehog .