The Hacker’s Guide to Kubernetes
summary
Live demos exploit two real scenarios: an open kubelet API on self‑managed EC2 nodes that allows unauthenticated command execution, and an RCE PHP workload that yields a reverse shell via netcat; attacker installs tcpdump, sniffs unencrypted intra‑cluster HTTP, steals JWT auth headers from pod traffic, and reuses tokens from a Redis token store. Concrete misconfigs shown: writable filesystems, containers running as root, privileged pods, exposed ingress and no network policies.
AI-written summary · about
chapters (11)
- 0:00Introduction and background
- 1:11Kubernetes architecture overview
- 4:06OWASP Kubernetes top 10 risks
- 12:04Demo setup and account registration
- 14:19Exploiting open kubelet API
- 22:21Establishing reverse shell
- 26:17Sniffing unencrypted traffic
- 30:18Account hijacking walkthrough
- 33:53Remote code execution in workloads
- 37:30Privileged pod and Redis access
- 43:18Summary and security model
related talks
46mThe Hacker's Guide to Kubernetes
54mThe Hacker’s Guide to Kubernetes
50mThe Hacker’s Guide to Kubernetes Reloaded
55mThe Hacker's Guide to Kubernetes
51mThe Hacker’s Guide to Insecure Workload Configuration in Kubernetes
19mHacking Kubernetes
38mA Treasure Map of Hacking (and Defending) Kubernetes
29mKubernetes Security: Attacking and Defending K8s Clusters