Yves Siegrist siegy22

Day 0

Lightning talks

Notary schedule
- Image signing
- Harbor compatible
- Trust policies with x509 certs
Metal3
Kiosk 19A, Thursday 10:30 - 13:30

Download the pull secret from RedHat cloud console.
Un-base64 the auths for all of the registries
Configure registry caches in Harbor
Configure imageContentSources in the install-config.yaml

apiVersion: v1
baseDomain: example.org
metadata:
 name: ocp

Keybase proof

I hereby claim:

I am siegy22 on github.
I am siegy22 (https://keybase.io/siegy22) on keybase.
I have a public key ASAtQ3l3I9eeHunPuGfe5v1akxMY7yR4ywCx-CDxawtJjAo

To claim this, I am signing this object:

Fedora bootc, k3s and cilium

Proof-of-concept homelab work; not recommended for production.

FROM quay.io/fedora/fedora-bootc:41

# Manual install of k3s-selinux because the installer tries using `rpm-ostree` which is not intended.
RUN dnf install -y https://github.com/k3s-io/k3s-selinux/releases/download/v1.6.latest.1/k3s-selinux-1.6-1.coreos.noarch.rpm

Installing k3s on Fedora CoreOS

Use the templates to provision your k3s instances on Fedora CoreOS using ignition. This will install k3s-selinux with rpm-ostree.

Mr. Robot CTF

/robots
/license (scroll down)
upload reverse shell in wp
brute force /home/robot/password
login as robot
Privilege escalation using nmap

Envizon TryHackMe

Three hints to start:

This is not an empty instance. Imagine that it is/was used and therefore contains user data Currently a note function is under development When looking for code execution on the system, the most obvious way is the best - it is important to understand what the application does

Enumeration

Hamlet TryHackMe

Enumeration

nmap

☁  ~  nmap --min-rate=3000 -sV -sC -o nmap hamlet.thm
Starting Nmap 7.94 ( https://nmap.org ) at 2023-09-11 20:04 CEST
Nmap scan report for hamlet.thm (10.10.196.230)

	<template>
	<v-row>
	<v-col xs="12">
	<v-data-table
	:headers="headers"
	:items="ingredients.edges.map((v) => v.node)"
	:loading="this.$apollo.queries.ingredients.loading"
	:server-items-length="ingredients.totalCount"
	:sort-by.sync="sortBy"
	:sort-desc.sync="sortDesc"