Skip to main content

We use cookies to ensure you get the best user experience. For more information see our cookie policy.

Frank & Herby make an app

Learn how the misconfiguration of containers can lead to opportunities for some and disasters for others.

Task 1: Frank & Herb Make an App!

Make sure to wait 5 minutes after the machine starts up before starting recon.

Containers are really cool, but they have security considerations just like everything else.  Break into the box and then figure out how to get root access!

This box will require some research into how to use microk8s.

Our story so far....
Two developers are venturing into the world of Kubernetes. Little do these developers know that their lack of understanding in 'k8s', containers, and git has left their resources open to exploitation!

Answer the questions below

  1. What port has a webpage frank was able to stand up?

  2. What did frank leave exposed on the site? 

  3. What is the user.txt flag?

  4. What is the root.txt flag? 

Room Icon

Frank & Herby make an app

Learn how the misconfiguration of containers can lead to opportunities for some and disasters for others.

medium

60 min

3,245

User profile photo.

To access material, start machines and answer questions login.

Score updated
Score updated

Set up your virtual environment

To successfully complete this room, you'll need to set up your virtual environment. This involves starting both your AttackBox (if you're not using your VPN) and Lab Machines, ensuring you're equipped with the necessary tools and access to tackle the challenges ahead.
Attacker machine
Status:Off
Lab machine
Status:Off

Make sure to wait 5 minutes after the machine starts up before starting recon.

Containers are really cool, but they have security considerations just like everything else.  Break into the box and then figure out how to get root access!

This box will require some research into how to use microk8s.

Our story so far....
Two developers are venturing into the world of . Little do these developers know that their lack of understanding in 'k8s', containers, and has left their resources open to exploitation!

Answer the questions below
What port has a webpage frank was able to stand up? 

What did frank leave exposed on the site? 

What is the user.txt flag?

What is the root.txt flag?