Tutorial: Bullet-Proof Kubernetes: Learn by Hacking
summary
Hands-on workshop arms teams with 22 disposable Kubernetes clusters and a cheat sheet, then runs a capture‑the‑flag sequence that demonstrates how common misconfigurations lead to full compromise. Attacks use nmap scans to find nodePorts, curl to trigger a shellshock exploit into nginx containers, pivoting to access a mounted docker socket and extract service account tokens to query the API and pull secrets. Exercises require writing a proof file on the node to validate host takeover; mitigations and exact kubectl commands are provided.
AI-written summary · about
chapters (7)
- 0:00Start
- 11:30What Can Go Wrong?
- 14:19Common Attacks on Kubernetes
- 16:32Pivoting from a compromised Pod/Container
- 28:17Kubernetes Cheat-sheet
- 29:55Accessing the cluster
- 43:34Capture the flag
related talks
45mThe Hacker’s Guide to Kubernetes
01h 24mTutorial: Attacking and Defending Kube...
49mAttacking and Detecting Attacks on Kubernetes Clusters
50mThe Hacker’s Guide to Kubernetes Reloaded
46mThe Hacker's Guide to Kubernetes
19mHacking Kubernetes
38mA Treasure Map of Hacking (and Defending) Kubernetes
01h 13mTutorial: Hands-on Hacking Kubernetes and Ways to Prevent It