Unobtainium
Unobtainium
Unobtainium 338
Unobtainium
RETIRED MACHINE

Unobtainium

Unobtainium - Linux Linux
Unobtainium - Hard Hard

4.8

MACHINE RATING

1435

USER OWNS

1103

SYSTEM OWNS

10/04/2021

RELEASED
Created by felamos

Machine Synopsis

Unobtainium is a hard difficulty Linux machine which features kubernetes exploitation and electron application reversing. Frontend web application serve unobtainium chat application created with electron which can be downloaded in three different packages (deb, rpm & snap). Electron application exposes a Node JS API which is affected with prototype pollution. Exploiting prototype pollution and gain reverse shell give us access inside a kubernetes pod. Understanding the Kubernetes RBAC system is critical in order to switch service accounts and create a malicious pod to mount root filesystem and escape the pod.

Machine Matrix

Ready to start your
hacking journey?