Monday, January 7, 2019

Kubernetes: Master Post

I have a few Kubernetes posts queued up and will make this the master post to index and give references for the topic. If i'm missing blog posts or useful resources ping me here or twitter.

Talks you should watch if you are interested in Kubernetes:

Hacking and Hardening Kubernetes Clusters by Example [I] - Brad Geesaman [demos for the talk above] [slide deck]

Perfect Storm Taking the Helm of Kubernetes Ian Coldwater

A Hacker's Guide to Kubernetes and the Cloud - Rory McCune
Shipping in Pirate-Infested Waters: Practical Attack and Defense in Kubernetes

Blog posts by others:

Auditing tools

CVE-2018-1002105 resources

CG Posts:

Open Etcd:
Etcd with kube-hunter:

Kubernetes ports:
Kubernetes dashboards:
Kublet 10255:
Kublet 10250
     - Container Logs:
     - Getting shellz 1:
     - Getting shellz 2:

Cloud Metadata Urls and Kubernetes

-I'll update as they get posted


No comments: