K8s NetworkPolicy Bypass
cloud · medium · +50 XP
Target
GET /api/lab/netpolicy-101/policies (active NetworkPolicies)
POST /api/lab/netpolicy-101/probe body {from_ns, to_service} (test reachability)
POST /api/lab/netpolicy-101/submit body {namespace, service}
Goal: the policy allows traffic from namespaces with label tier=frontend. The dev namespace is unlabeled, so technically not blocked. Probe dev → billing-api to reach the private service.
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/netpolicy-101/
// reuse on the cli
// submit flag
// no solves yet