Patrycja Wegrzynowicz at JNation 2024
summary
Hacking-focused session shows step-by-step live demos that connect to a worker node’s kubelet API open, enumerate ports, read pod state and instantiate a temporary malicious pod to prove exploitability; cites OWASP claim that misconfigured workloads are the top Kubernetes risk and contrasts hardened managed clusters with vulnerable bare-metal installs; demonstrates that default installs and outdated components are the real attack surface and that simple policy enforcement blocks many of these exploits.
AI-written summary · about
related talks
45mThe Hacker’s Guide to Kubernetes
51mThe Hacker’s Guide to Insecure Workload Configuration in Kubernetes
29mKubernetes Security: Attacking and Defending K8s Clusters
46mThe Hacker's Guide to Kubernetes
49mAttacking and Detecting Attacks on Kubernetes Clusters
26mHacking into Kubernetes Security for Beginners
19mHacking Kubernetes
50mThe Hacker’s Guide to Kubernetes Reloaded