README.md

Sniff

Red Challenge

Find a flag.

$ kubectl get pods -n sniff
NAME                      READY   STATUS    RESTARTS   AGE
client-66b6f5cdcf-v5n9j   1/1     Running   0          3m24s
server-79b88f567-v4xsp    1/1     Running   0          3m26s
victim-cb9b4c946-d7vkq    1/1     Running   0          15m

$ kubectl exec -it victim-cb9b4c946-d7vkq bash

Hint 1

An HTTP request is being sent from the client to the server.

Hint 2

DNS Spoofing

Blue Challenge

• Drop CAP_NET_RAW
• Add a OPA policy to validate CAP_NET_RAW