containers_cloud challenge
Service Account Spill — Case BC8B
Mossbrook Pharmacy is investigating its vendor portal after a controlled training incident exposed a realistic weakness in a synthetic environment. Step in as the responder and follow the evidence.
Incident briefing
Scenario
You have been brought in to help Mossbrook Pharmacy investigate its vendor portal after a controlled training incident exposed a realistic weakness in a synthetic environment. The environment is intentionally vulnerable and isolated for this exercise.
Objective
Inspect the synthetic container/cloud application for the intended configuration weakness and recover the audit flag.
Skills
What you will practice
- Kubernetes
- service accounts
- API access
Tooling
Useful Kali tools
- curl
- jq
Ready to practice?
Launch an isolated target
Sign in to Locinode to receive a disposable lab environment and Kali workstation for this mission. Public pages never expose flags or intended solutions.
Enter range