From 4ca310d66d99dee7c5156b16c2f785c5208b91cc Mon Sep 17 00:00:00 2001
From: carlospolop <carlospolop@gmail.com>
Date: Thu, 23 Dec 2021 08:11:52 -0500
Subject: [PATCH] kubelet

---
 build_lists/sensitive_files.yaml              | 26 +++++++++++++++++++
 .../linpeas_parts/6_software_information.sh   |  2 ++
 2 files changed, 28 insertions(+)

diff --git a/build_lists/sensitive_files.yaml b/build_lists/sensitive_files.yaml
index f3d234e..ddb0b2c 100644
--- a/build_lists/sensitive_files.yaml
+++ b/build_lists/sensitive_files.yaml
@@ -706,6 +706,32 @@ search:
                 search_in: 
                   - common
 
+  - name: Kubelet
+    value:
+        config:
+          auto_check: True
+
+        files:
+          - name: "kubelet"
+            value: 
+                files:
+                  - name: "kubeconfig"
+                    value:
+                        bad_regex: "server:|cluster:|namespace:|user:|exec:"
+                type: d
+                search_in: 
+                  - /var
+          
+          - name: "kube-proxy"
+            value: 
+                files:
+                  - name: "kubeconfig"
+                    value:
+                        bad_regex: "cluster:|certificate-authority-data:|namespace:|user:|token:"
+                type: d
+                search_in: 
+                  - /var
+  
   - name: VNC
     value:
         config:
diff --git a/linPEAS/builder/linpeas_parts/6_software_information.sh b/linPEAS/builder/linpeas_parts/6_software_information.sh
index dcc058d..69b7b80 100644
--- a/linPEAS/builder/linpeas_parts/6_software_information.sh
+++ b/linPEAS/builder/linpeas_parts/6_software_information.sh
@@ -575,6 +575,8 @@ if [ -d "$HOME/.kube" ] || [ -d "/etc/kubernetes" ] || [ -d "/var/lib/localkube"
   ls -Rl /etc/kubernetes /var/lib/localkube 2>/dev/null
 fi
 
+peass{Kubelet}
+
 peass{Firefox}
 
 peass{Chrome}