Hacking into Kubernetes Security for Beginners
summary
Live demo shows a dev with kubectl exec into a misconfigured dev-database controller using overly-broad RBAC to edit another namespace’s Ingress, then an attacker abuses missing admission control and hostNetwork/hostPath to exploit CVE2020-15257 in containerd, spawn a reverse shell via netcat and reach the node. Audit trails land in Datadog audit logs. The team deploys Gatekeeper, network policies, and image scanning and the exploits in the demo succeed until incident response and logging catch and contain them.
AI-written summary · about
chapters (4)
- 0:00Start
- 1:57RBAC: Role Based Access Control
- 12:22CVE Common Vulnerabilities and Exposures
- 13:08POC: Proof Of Concept
related talks
19mHacking Kubernetes
46mThe Hacker's Guide to Kubernetes
45mThe Hacker’s Guide to Kubernetes
55mThe Hacker's Guide to Kubernetes
54mUnderstanding and Mitigating Privilege Escalation Threats in Kubernetes
50mThe Hacker’s Guide to Kubernetes Reloaded
43mKubernetes Security: Attacking and Defending Modern Infrastructure
01h 13mTutorial: Hands-on Hacking Kubernetes and Ways to Prevent It