The Hacker's Guide to Kubernetes
summary
Four live demos exploit OWASP Kubernetes Top 10 issues: a scan finds open kubelet API on two worker nodes allowing remote command execution and reverse shells via ncat, tcpdump and apk install; missing network policies let an RCE hello app reach a demo app and radius storage to remove JWT revocations; a hostPID escape escalates to the control plane and reads etcd to steal the HS256 JWT signing secret; CAP_SYS_MODULE loads a kernel module to get node-level shells.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 2:13Kubernetes architecture
- 6:40OWASP top security risks
- 9:37Theory versus practice
- 10:01Demo setup and JWT issues
- 15:07Exploiting kubelet API
- 26:25Analyzing first demo
- 26:46Remote code execution in hello application
- 31:25Network segmentation and Redis
- 32:31Privileged pod with host PID
- 39:09Security context capabilities
- 43:37Final demos and summary
- 44:41Conclusion
related talks
45mThe Hacker’s Guide to Kubernetes
50mThe Hacker’s Guide to Kubernetes Reloaded
55mThe Hacker's Guide to Kubernetes
54mThe Hacker’s Guide to Kubernetes
51mThe Hacker’s Guide to Insecure Workload Configuration in Kubernetes
19mHacking Kubernetes
38mA Treasure Map of Hacking (and Defending) Kubernetes
31mA Hacker's Guide to Kubernetes and the Cloud