The Hacker’s Guide to Insecure Workload Configuration in Kubernetes
summary
Live interactive demos show newly registered accounts getting hijacked by exploiting misconfigured workloads: a created pod mounts an hostPath volume so kubectl reads kubeconfigs and steals admin credentials, etcd is read to recover a JWT secret extraction and forged tokens log in as other users, a crafted privileged pod uses nsenter to escape to host and a reverse shell plus sniffing CNI traffic captures bearer tokens. Each exploit works end-to-end, resulting in full cluster compromise of several demo accounts.
AI-written summary · about
chapters (9)
- 0:00Introduction and setup
- 2:37Kubernetes architecture overview
- 6:34Kubernetes security risks
- 12:32Demo environment setup
- 14:28First demo: Host path misconfiguration
- 25:57Second demo: Node escape via privileged pod
- 33:12Third demo: Reverse shell and traffic sniffing
- 43:40Summary and lessons learned
- 49:17Q&A and closing remarks
related talks
50mThe Hacker’s Guide to Kubernetes Reloaded
45mThe Hacker’s Guide to Kubernetes
55mThe Hacker's Guide to Kubernetes
46mThe Hacker's Guide to Kubernetes
54mUnderstanding and Mitigating Privilege Escalation Threats in Kubernetes
50mBeyond the Pod: Privilege Escalation in Kubernetes
54mThe Hacker’s Guide to Kubernetes
01h 13mTutorial: Hands-on Hacking Kubernetes and Ways to Prevent It