Capture the Flag Wrap Up & Summary
Talkat Cloud Native Security Day North America 2020 · on Tuesday, 2020-11-17· at 17:25· Virtual , VIrtual·
summary
Six hands-on CTF scenarios reproduce real failures: a privileged container mounts host disks and exposes a node secret; a host PID namespace lets /proc reveal a Postgres env var and a secret; a CI pod with the Docker socket is abused (docker client + docker inspect) to read an access key; a kubelet read-only port yields pod contents via curl and jq; external access via nmap and hydra brute forces SSH to a jumpbox, steals a service-account token and secrets. Organizers spin up 327 clusters (~15,000 nodes) with a 73-user peak; flags validate each exploit.
AI-written summary · about
chapters (19)
- 0:00Introduction
- 3:35Spoiler Alert
- 4:15Root User
- 8:45Kubernetes
- 10:00Privileged
- 13:50Red Flag
- 14:15Container
- 15:10Postgres
- 16:40Capture the Flag
- 18:55CI Server Vulnerability
- 24:00Escalation
- 25:00Map Points
- 26:00Network Policy
- 27:00Installing Software
- 27:45Finding the Pod
- 29:50Pod breech extract
- 31:10Accessing the cluster
- 33:30Sharing screen
- 42:20Wrap up
related talks
23mCapture The Flag Summary + Wrap UpVirtual
49mAttacking and Detecting Attacks on Kubernetes Clusters
30mHow We Used Kubernetes to Host a Capture the Flag (CTF)
23mCTF Overview and Experience
32mKubeCapture: A Live Hacking Showcase on Kubernetes Security
10mLightning Talk: Capture The Flag Overview
46mCapture the Flag for Developers
14mClosing + CTF Wrap Up