siegy22

Cisco ISE on OpenShift Virtualization

Ref.

• https://access.redhat.com/solutions/3598391
• https://kubevirt.io/user-guide/user_workloads/hook-sidecar/#enabling-sidecar-feature-gate

Installation

siegy22

Day 0

Lightning talks

• Notary schedule
  • Image signing
  • Harbor compatible
  • Trust policies with x509 certs
• Metal3
• Kiosk 19A, Thursday 10:30 - 13:30

siegy22

• Download the pull secret from RedHat cloud console.
• Un-base64 the auths for all of the registries
• Configure registry caches in Harbor
• Configure imageContentSources in the install-config.yaml

apiVersion: v1
baseDomain: example.org
metadata:
 name: ocp

siegy22

Keybase proof

I hereby claim:

• I am siegy22 on github.
• I am siegy22 (https://keybase.io/siegy22) on keybase.
• I have a public key ASAtQ3l3I9eeHunPuGfe5v1akxMY7yR4ywCx-CDxawtJjAo

To claim this, I am signing this object:

siegy22

Fedora bootc, k3s and cilium

Proof-of-concept homelab work; not recommended for production.

FROM quay.io/fedora/fedora-bootc:41

# Manual install of k3s-selinux because the installer tries using `rpm-ostree` which is not intended.
RUN dnf install -y https://github.com/k3s-io/k3s-selinux/releases/download/v1.6.latest.1/k3s-selinux-1.6-1.coreos.noarch.rpm

siegy22

Installing k3s on Fedora CoreOS

Use the templates to provision your k3s instances on Fedora CoreOS using ignition. This will install k3s-selinux with rpm-ostree.

siegy22

Mr. Robot CTF

• /robots
• /license (scroll down)
• upload reverse shell in wp
• brute force /home/robot/password
• login as robot
• Privilege escalation using nmap

siegy22

Envizon TryHackMe

Three hints to start:

This is not an empty instance. Imagine that it is/was used and therefore contains user data Currently a note function is under development When looking for code execution on the system, the most obvious way is the best - it is important to understand what the application does

Enumeration

siegy22

Hamlet TryHackMe

Enumeration

nmap

☁  ~  nmap --min-rate=3000 -sV -sC -o nmap hamlet.thm
Starting Nmap 7.94 ( https://nmap.org ) at 2023-09-11 20:04 CEST
Nmap scan report for hamlet.thm (10.10.196.230)

siegy22