Hacking Containers, Kubernetes and Clouds

Event start: 1 month, 3 weeks ago // Event Information

Hacking Containers, Kubernetes and Clouds
Typ
Assembly Event
Time
Dec. 27, 2021, 12:30 p.m. - Dec. 27, 2021, 1 p.m.
Speakers
No Speakers publicated yet
Language
en
Room
c-base
Host
c-base

Tokens are a powerful way of controlling the access to to Rest APIs. Chasing them should be hard. Unfortunately, there is a widespread habit of leaving tokens lying around allowing very powerful attack vectors. An attack demonstrates how to hack an OpenShift cluster, which is fully securty compliant to the accepted standards of NIST and CIS. Hijacking a container gives full control to the cluster, including host access. If running in the cloud, the cluster can be used for further attacks, because the host has another token to the cloud API server. With this token, arbitrary accounts and cloud resources can be controlled, including virtual machines, storage and derived accounts.

This will be part of a set of trainings on Kubernetes security, open sourced at

https://github.com/thomasfricke/training-kubernetes-security



recommendations

No entries available.


Archived page - Impressum/Datenschutz