The Hacker’s Guide to Kubernetes Reloaded
summary
Live demos show account takeover by abusing leaked kubeconfig and misconfigured pods: apply a manifest with hostPath hostPID hostNetwork and privileged mode, get a reverse shell with ncat, nsenter into PID 1 and read the host, or directly read the etcd data directory to extract base64 Kubernetes Secrets and the JWT signing key. Tools used: kubectl, ncat, tcpdump for pod network sniffing, and simple JWT forging; the exploits succeed repeatedly because Secrets aren’t encrypted by default and there’s no centralized admission policy.
AI-written summary · about
chapters (6)
- 0:00Introduction and setup
- 2:41Kubernetes architecture overview
- 12:00Security risks in Kubernetes
- 17:33Demo one hijacking accounts
- 33:52Demo two reverse shell attack
- 46:42Summary and best practices
related talks
45mThe Hacker’s Guide to Kubernetes
55mThe Hacker's Guide to Kubernetes
51mThe Hacker’s Guide to Insecure Workload Configuration in Kubernetes
46mThe Hacker's Guide to Kubernetes
54mThe Hacker’s Guide to Kubernetes
50mBeyond the Pod: Privilege Escalation in Kubernetes
19mHacking Kubernetes
40mHacking and Hardening Kubernetes Clusters by Example [I]