Ask me anything about your lessons or your code.
“What is a port?” · “Why is my code erroring?”
You cannot attack a cluster you cannot map, so start with the parts that hold the keys.
Kubernetes Architecture
You cannot attack a cluster you cannot map, so start with the parts that hold the keys.
Pods, Services, and RBAC
Every pod carries a token, and RBAC decides how far that token gets you.
Common Cluster Misconfigurations
Clusters rarely fall to zero-days, they fall to defaults nobody changed.
Attacking a Cluster
One compromised pod, then the node under it, then every secret in the cluster.
Hardening a Cluster
Every attack path in this module closes if you take away the defaults nobody changed.