Compromising Kubernetes Cluster by Exploiting RBAC Permissions
summary
Shows how attackers can abuse Kubernetes RBAC permissions to take over clusters or misuse resources (for example, crypto-mining), using live demonstrations. Presents an open-source tool that helps blue and red teams find and remove risky Kubernetes permissions; assumes basic Kubernetes and Docker knowledge.
AI-written summary · about
chapters (14)
- 0:00Intro
- 2:00Kubernetes - containerized application
- 3:25Kubernetes architecture
- 8:00Authentication
- 11:02Service Account Token Location
- 12:13Role-Based Access Control (RBAC)
- 15:46Examples - No. 1
- 23:18Escape from a Pod #1
- 24:35Pods resource
- 27:42Examples - No. 2: Reading Secret
- 31:28Best Practices
- 41:30Conclusions
- 42:24Apply what you have learned today
- 45:11# cat final.txt
related talks
31mKubernetes RBAC Security: A Practical Overview
54mUnderstanding and Mitigating Privilege Escalation Threats in Kubernetes
35mRBAC to the Future: Untangling Authorization in Kubernetes
38mKubernetes Security: Attacking and Defending K8s Clusters
13mBreaching the sky’s limit on your cloud: privilege escalation in Kubernetes
33mHow the Basics Of Kubernetes Auth Scale For Organizations
36mFrom the Cluster to the Cloud: Lateral Movements in Kubernetes
35m📙 RBAC Atlas: Mapping Real-World Kubernetes Permissions and Exposing Risky Projects 🏗️