HackTheBox Pro Lab: Sidecar — Kubernetes SSRF, Service Mesh Abuse & AD Compromise

Complete walkthrough of HackTheBox Sidecar Pro Lab — exploiting SSRF to steal Kubernetes service account tokens, abusing Istio sidecar proxy misconfiguration, escaping to worker nodes via privileged pods, and compromising an Active Directory domain through K8s-stored credentials.