Lightlines
By yaklang

kubernetes-pentesting

yaklang3.4k installs

Find paths from Kubernetes pods to cluster control.

What it does

Guides penetration tests of Kubernetes clusters to identify exposed services, extract accessible secrets, and test privilege-escalation paths.

When to use it

Use when testing Kubernetes clusters for API access, permission abuse, secret exposure, or pod escape.

How to use it

Give it a Kubernetes environment to test; it checks access and investigates the applicable exposure and escalation paths.

Uses

Latest review

What you need · 4

Uses kubectl to enumerate permissions, roles, secrets, and network policies and to perform cluster operations.

Requires access to a Kubernetes environment; the decision tree distinguishes access from a pod, a node, or outside the cluster.


Access · 6

This skill

Kubernetes

Execute

Privileged pods and commands

Write

Creates privileged pods and tokens

etcd

Read

Reads secrets directly from etcd