Hacking and Securing Kubernetes Clusters

Learn how to attack and defend kubernetes clusters

Created by: The Offensive Labs
A Training Brand

Created by: Srinivas .
Your instructor

What Will I Learn?

• Students will learn different kubernetes components
• Students will learn fundamentals of role based access controls in Kubernetes
• Students will learn how service accounts work in Kubernetes
• Students will learn the basics of Roles, Role Bindings, Cluster Roles, Cluster Role Bindings
• Students will understand the Kubernetes Attack Surface
• Students will learn how a misconfigured Kubernetes Cluster can be exploited by attackers
• Students will learn how to attack the API Server using insecure port
• Students will learn how to attack a misconfigured Kubelet API
• Students will learn how ETCD storage works
• Students will learn how exposed Kubernetes Dashboard can be abused
• Students will learn how to perform Static Analysis of YAML files using Kube-audit
• Students will learn how to perform Static Analysis using Kubesec
• Students will learn how to perform Security Assessments using Kube-hunter
• Students will learn how to audit clusters using Kube-bench
• Students will learn how to scan Docker images using trivy
• Students will learn how to implement network policies
• Students will learn how to use Kubernetes Security Context to prevent attacks

Requirements

• The course begins from basics
• Its good to have Docker knowledge

Target audience

• Security Professionals who are into Kubernetes
• Cloud Engineers
• Devops Professionals
• Penetration testers
• Red team members
• Anyone who is interested in ethical hacking and penetration testing
• Anyone who is interested in information security concepts