Live Security Hack - Hack My Mis-configured Kubernetes

This hands-on demonstration shows how an attacker can expand a vulnerable web application exploit from a container to an entire Kubernetes cluster. It also examines security boundaries, access controls, container configuration, and defensive measures.

Syllabus

Introduction
Demo Overview
Thought Process
What We Know
Timeline of Doom
Environment Variables
Network Information
Service Token
Update Timeline
Directory traversal vulnerability
Access Matrix
Secure namespace
Security boundary
Readonly root file system
Spawn root pod
Spawn nonroot container
Exploring the network
Update
Hack with new token
That was awesome
Confidentiality Availability Integrity
Container Primitives
Container Image
Critical Execution Path
Change Defaults
Be Careful With Your Code