Tutorial: Hacking up a Storm With Kubernetes
Talkat KubeCon + CloudNativeCon Europe 2025 · on Friday, 2025-04-04· at 13:45· Level 1 | Hall Entrance N11·
summary
Hands-on lab builds a local kind cluster, applies supplied manifests and shows how a mis-scoped service account token + kubectl exec lets a developer create a Role with RBAC escalate to grant namespace-admin, remove a PodSecurityAdmission label, and run a privileged hostPath pod to become node root and steal admin kubeconfigs. The tutorial demos using kubectl, service account tokens, and a live exploit of CVE-2022-8554 (service ExternalIPs/IPTables hijack) and lists mitigations.
AI-written summary · about
chapters (12)
- 0:00Tutorial introduction
- 1:46Kubernetes attack scenario
- 8:58Security gates and authentication
- 16:15Developer's goal and failure
- 19:46Bypassing pod security admission
- 29:20Privilege escalation with escalate
- 32:51Removing security labels
- 35:37Compromising node with pods
- 38:02Extracting admin credentials
- 41:36Exploiting Kubernetes CVEs
- 47:53Key takeaways and prevention
- 49:56Q&A
related talks
54mUnderstanding and Mitigating Privilege Escalation Threats in Kubernetes
33mTutorial: Hack My Mis-Configured Kubernetes
44mStranger Danger - hack my misconfigured Kubernetes
50mThe Hacker’s Guide to Kubernetes Reloaded
26mHacking into Kubernetes Security for Beginners
40mHacking and Hardening Kubernetes Clusters by Example [I]
50mBeyond the Pod: Privilege Escalation in Kubernetes
13mBreaching the sky’s limit on your cloud: privilege escalation in Kubernetes