https://john-jkar.github.io/myblog/tags/kubelet/Recent content in Kubelet on 4mN3s14 | BlogHugoenMon, 06 Jul 2026 10:00:00 +0000https://john-jkar.github.io/myblog/posts/fireflow/Mon, 06 Jul 2026 10:00:00 +0000https://john-jkar.github.io/myblog/posts/fireflow/<h1 id="fireflow---hack-the-box-machine-writeup">FireFlow - Hack The Box Machine Writeup</h1> <p><strong>Machine:</strong> FireFlow<br> <strong>Category:</strong> Web, Kubernetes, RCE<br> <strong>Difficulty:</strong> Meduim<br> <strong>Author:</strong> 4mN3s14</p> <h2 id="recon">Recon</h2> <p>Nmap scan revealed ports 22 (SSH) and 443 (HTTPS) open with a self-signed cert for <code>fireflow.htb</code> and <code>*.fireflow.htb</code>:</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-bash" data-lang="bash"><span style="display:flex;"><span>sudo nmap -sC -sV -vv -oA fireflow 10.129.244.214 </span></span><span style="display:flex;"><span> </span></span><span style="display:flex;"><span>PORT STATE SERVICE VERSION </span></span><span style="display:flex;"><span>22/tcp open ssh OpenSSH 9.6p1 Ubuntu </span></span><span style="display:flex;"><span>443/tcp open ssl/http nginx </span></span></code></pre></div><p>Added <code>fireflow.htb</code> and <code>flow.fireflow.htb</code> to <code>/etc/hosts</code> after visiting the main page.</p>