Cloud Hacking Scenarios

on YouTube ↗31m

" summary

Finds show a public Kubernetes API with RBAC disabled exposes base64 secrets that reveal AWS keys with only S3/Lambda access, then Jenkins credentials in a configmap allow kubectl port-forward to Jenkins, shell access to the pod and discovery of a Jenkins-assigned IAM role with full AWS admin, yielding account takeover. Separate cases use a hard-coded encryption key in a public GitHub repo to decrypt Office365 creds, then a SharePoint PDF with Jira admin creds that lead to AWS admin keys.

AI-written summary · about

" chapters (9)

1. 0:00Start
2. 5:41Public resources
3. 7:11Disabled security features
4. 8:28Principle of Least Privilege
5. 13:16Prod data on a non-prod environment
6. 15:10Critical services using a shared mail
7. 22:16Hardcoded sensitive data
8. 24:43Bad tools selection
9. 28:13Lack of security awareness

" related talks

• 36mCloud Hacking ScenariosMichal Brygidyn · NDC Security 2022
• 33mCloud Hacking ScenariosMichal Brygidyn · ContainerDays 2022
• 33mLive Hacking Cloud Architectures - Thorsten Jakoby and Mirna AlaisamiThorsten Jakoby, Mirna Alaisami · ContainerDays 2023
• 45mLive Hacking Cloud ArchitecturesThorsten Jakoby, Mirna Alaisami · Spring I/O 2023
• 45mLive Hacking Cloud ArchitecturesThorsten Jakoby, Mirna Alaisami · JCON Europe 2023
• 28m"PIVOT!" — Bouncing between your app, your cluster and your cloudChristophe Tafani-Dereeper · KCD Zürich 2024
• 19mHacking KubernetesAndrew Martin · KCD Rio de Janeiro 2025
• 33mHack Back; Let’s Learn Security With CTFs!Lewis Denham Parry, Natalia Reka Ivanko · KubeCon + CloudNativeCon North America 2022