Info

Enumeration

Attacking

Service Account Tokens

Kubernetes tools

Hardeing guide

Kubernetes Vulnerable labs

Threat Matrix for Kubernetes

Defensive tools

Extra Resources:

• https://www.cyberark.com/resources/threat-research-blog/kubernetes-pentest-methodology-part-1
• https://www.conjur.org/blog/tutorial-kubernetes-vulnerability-scanning-testing-with-open-source/
• https://book.hacktricks.xyz/cloud-security/pentesting-kubernetes/kubernetes-enumeration
• https://0xdf.gitlab.io/2022/02/14/htb-steamcloud.html
• https://github.com/ksoclabs/awesome-kubernetes-security