A Treasure Map of Hacking (and Defending) Kubernetes
summary
Shows concrete exploits and mitigations: an npm preinstall backdoor executes as the installer and reads SSH/GPG/cloud tokens; a malicious container image with hostPID and privileged mounts fires a reverse shell via ngrok into the cluster; a real-world dirty pipe kernel exploit injects a reverse shell to gain root on the node. Demonstrates enumerating kubelet-mounted files to harvest service account and AWS keys, triggering a canary alert, and argues for next-gen runtimes, runtime hardening, strict mounts and fast AMI/patch pipelines.
AI-written summary · about
chapters (10)
- 0:00Start
- 2:33Pod Treasure Map
- 7:48How to: Cloud Native Security
- 8:00Code to Cloud: Attack Patterns
- 8:54Supply Chain ELIS
- 15:35Supply Chain Reverse Shell: Malicious Package
- 16:39Supply Chain Attacks
- 16:52Reverse Shells
- 21:30Summary: Supply Chain Reverse Shell
- 22:22Containery Escapes
related talks
19mHacking Kubernetes
45mThe Hacker’s Guide to Kubernetes
46mThe Hacker's Guide to Kubernetes
40mHacking and Hardening Kubernetes Clusters by Example [I]
01h 13mTutorial: Hands-on Hacking Kubernetes and Ways to Prevent It
34mHijack a Kubernetes Cluster - a Walkthrough
49mAttacking and Detecting Attacks on Kubernetes Clusters
01h 24mTutorial: Attacking and Defending Kube...