ControlPlane CTF

Setup

Prepare your workstation and connect to your assigned KubeSim cluster.

SSH

Walkthrough

You will receive a credential bundle from the event organizer or CTF Taskmaster. Extract the files:

cd ~/Downloads
tar xf <id>.tar.gz
ls

You should see:

simulator_config
simulator_rsa
simulator_known_hosts

Connect to your attack cluster:

ssh -F simulator_config -oIdentitiesOnly=yes bastion

Type yes when asked whether you want to continue connecting.

The authenticity of host '*** (***)' can't be established.

ECDSA key fingerprint is SHA256:/***.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '***.***.***.***' (ECDSA) to the list of known hosts.

      _/_/    _/_/_/_/_/  _/_/_/_/_/    _/_/      _/_/_/  _/    _/
   _/    _/      _/          _/      _/    _/  _/        _/  _/
  _/_/_/_/      _/          _/      _/_/_/_/  _/        _/_/
 _/    _/      _/          _/      _/    _/  _/        _/  _/
_/    _/      _/          _/      _/    _/    _/_/_/  _/    _/

Welcome to Kubesim | with love from ControlPlane | https://kubesim.io

If a challenge requires browser access, create a tunnel to local port 8080:

ssh -F simulator_config -L 8080:127.0.0.1:8080 bastion -N

Videos

Attack

When you are connected to the cluster, you are ready to go. Remember:

  • The scenario instructions contain useful information and starting points
  • Flags use the format flag_ctf{IncludePrefixWhenSubmitting}
  • Pay attention to your initial access and keep notes as you work

TIP: Copy the scenario tips into your notes and keep a record of your progress through the attack.