Find paths from Kubernetes pods to cluster control.
Guides penetration tests of Kubernetes clusters to identify exposed services, extract accessible secrets, and test privilege-escalation paths.
When to use it
Use when testing Kubernetes clusters for API access, permission abuse, secret exposure, or pod escape.
Give it a Kubernetes environment to test; it checks access and investigates the applicable exposure and escalation paths.
Uses kubectl to enumerate permissions, roles, secrets, and network policies and to perform cluster operations.
Requires access to a Kubernetes environment; the decision tree distinguishes access from a pod, a node, or outside the cluster.
This skill
Kubernetes
Privileged pods and commands
Creates privileged pods and tokens
etcd
Reads secrets directly from etcd