TryHackMe Free Room | Frank & Herby Walkthrough | Kubernetes Privilege Escalation with MicroK8s

#k8s #cybersecurity #ethicalhacking
In this video, we perform a full walkthrough of the TryHackMe room "Frank & Herby Make an App!" and demonstrate how to compromise the machine from initial reconnaissance to full root access.

This room is a great example of how misconfigured Kubernetes environments can lead to privilege escalation. We senumerate web directories, discover exposed credentials, and gain SSH access to the system.

Once inside the machine, we analyze the MicroK8s Kubernetes environment and identify a privilege escalation opportunity via deployment creation. By exploiting MicroK8s privilege escalation (CVE-2019-15789) and abusing hostPath mounts, we escalate privileges to root and capture the final flag.

This walkthrough demonstrates several important penetration testing techniques including:

🔹 Web directory enumeration using dirsearch
🔹 Credential discovery in exposed files
🔹 SSH access using leaked credentials
🔹 Kubernetes enumeration with kubectl
🔹 Exploiting MicroK8s deployments for privilege escalation
🔹 Abusing hostPath mounts to modify host files
🔹 Escalating privileges to root

If you're learning penetration testing, Kubernetes security, or preparing for CTF challenges, this room provides valuable real-world lessons about container orchestration security risks.

👍 If you enjoy cybersecurity walkthroughs, consider subscribing for more TryHackMe, HackTheBox, and VulnHub tutorials.

Видео TryHackMe Free Room | Frank & Herby Walkthrough | Kubernetes Privilege Escalation with MicroK8s канала Junhua's Cyber Lab