Der Weltuntergang ist verschoben, wir lassen die Lichter hier bis zum 1. Januar 2022 gegen 11 Uhr an - feiert Silvester gerne in der 2D-Welt oder mit euren Lieben in einem Jitsi-Raum. // The end is not so nigh, we will try to keep everything running until January 1st 2022 ~11am - celebrate new year in the 2D world or with your loved ones via Jitsi.
Hacking Containers, Kubernetes and Clouds
Event start:
1 month, 3 weeks ago // Event Information
Tokens are a powerful way of controlling the access to to Rest APIs. Chasing them should be hard.
Unfortunately, there is a widespread habit of leaving tokens lying around allowing very powerful attack vectors. An attack demonstrates how to hack an OpenShift cluster, which is fully securty compliant to the accepted standards of NIST and CIS. Hijacking a container gives full control to the cluster, including host access. If running in the cloud, the cluster can be used for further attacks, because the host has another token to the cloud API server. With this token, arbitrary accounts and cloud resources can be controlled, including virtual machines, storage and derived accounts.
This will be part of a set of trainings on Kubernetes security, open sourced at
