Pentesting Azure Container Services

on YouTube ↗48m

" summary

Live demos show exact steps: steal a cached kube token from ~/.kube and an AZ CLI session, stole .kube token, pull an image from ACR with docker, replace a layer.tar and update the manifest hash to trojanize image layer.tar, push it back, deploy to ACI and AKS, get an interactive shell, run nmap and redis-tools to reach the voting backend and read live votes. Mitigations include content trust, private ACR access, and Azure Defender scans.

AI-written summary · about

" chapters (7)

1. 0:00Introduction to session
2. 3:01Containers and Azure basics
3. 7:23Quick wins in Kubernetes
4. 12:03Trojanizing container images
5. 27:00Deploying trojanized containers
6. 38:54Mitigations and security tips
7. 44:54Additional resources and Q&A

" related talks

• 52mPentesting Azure Container ServicesSergey Chubarov · Global Azure Virtual 2021
• 59mPentesting Azure Container ServicesSergey Chubarov · NDC Security 2024
• 47mBest-practices for securing your Azure Container ServicesSjoukje Zaal · NDC Oslo 2022
• 43mSecuring container deployments on Azure Kubernetes Service with open-source toolsToddy Mladenov, Nannette Sperling, Joshua Duffney, Aaron Wislang · Microsoft Build 2023
• 23mContainer code with confidential containers on AzureP. Khandavilli, A. Gowda · OC3 2023
• 35mHijack a Kubernetes Cluster - a WalkthroughNico Meisenzahl · ContainerDays 2022
• 01h 13mTutorial: Hands-on Hacking Kubernetes and Ways to Prevent ItEric Smalling · CloudNativeSecurityCon North America 2023
• 34mHijack a Kubernetes Cluster - a WalkthroughNico Meisenzahl · Cloud Native Rejekts NA 2021