corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a08782-48c8-7150-8a36-639ce3a9800c

A Brief Deep-Dive into Attacking and Defending Kubernetes

heilancoos.github.io · published 16 December 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at heilancoos.github.io Wayback capture
2blogs citing
First cited
29 Dec 2025
Most recent
13 Feb 2026
Rank this month
not ranked
Links from this post
39
Words captured
13,821

Cited by

Blog
In the post
Date
Shellsharks
Scroll ūndētrīgintā Read at the source ↗
13 Feb 2026
loworbitsecurity.com
Radar #15: Week of 12/29/2025 Read at the source ↗
29 Dec 2025

Links from this post

Link
Host
https://kubernetes.io/
kubernetes.io
https://www.tigera.io/learn/guides/kubernetes-security/kubernetes-statistics/
tigera.io
https://kubernetes.io/docs/concepts/overview/components/
kubernetes.io
https://kubernetes.io/docs/tasks/administer-cluster/configure-upgrade-etcd/
kubernetes.io
https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
kubernetes.io
https://kubernetes.io/docs/concepts/configuration/configmap/
kubernetes.io
https://kubernetes.io/docs/concepts/configuration/secret/
kubernetes.io
https://microsoft.github.io/Threat-Matrix-for-Kubernetes/
microsoft.github.io
https://www.activestate.com/blog/kubernetes-runtime-security/
activestate.com
https://falco.org/
falco.org
https://github.com/falcosecurity/plugins/tree/main/plugins/k8saudit
github.com
https://helm.sh/docs/intro/install/
helm.sh
https://falco.org/docs/concepts/rules/custom-ruleset/
falco.org
https://falco.org/docs/concepts/outputs/forwarding/
falco.org
https://kubernetes.io/docs/reference/command-line-tools-reference/kubelet/
kubernetes.io
https://kubernetes.io/docs/reference/access-authn-authz/authentication/
kubernetes.io
https://kubernetes.io/docs/reference/access-authn-authz/kubelet-authn-authz/
kubernetes.io
https://www.cyberark.com/resources/threat-research-blog/using-kubelet-client-to-attack-the-kubernetes-cluster
cyberark.com
https://github.com/heilancoos/k8s-custom-detections/blob/main/examples/check_anonymous_k8s.py
github.com
https://kubernetes.io/docs/reference/access-authn-authz/rbac/
kubernetes.io
First-Ever Attack Leveraging Kubernetes RBAC to Backdoor Clusters Read at the source ↗
aquasec.com
https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/
kubernetes.io
https://kubenomicon.com/Privilege_escalation/Privileged_container.html
kubenomicon.com
https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/
kubernetes.io
https://blog.rewanthtammana.com/creating-malicious-admission-controllers
blog.rewanthtammana.com
https://www.aquasec.com/blog/kubernetes-security-pod-escape-log-mounts
aquasec.com
https://www.shodan.io/search?query=etcd
shodan.io
https://rootedsec.io/pages/posts/08-04-24/hacking-etcd.html
rootedsec.io
https://github.com/nccgroup/kubetcd
github.com
https://www.nccgroup.com/research-blog/post-exploiting-a-compromised-etcd-full-control-over-the-cluster-and-its-nodes/
nccgroup.com
https://www.positronsecurity.com/blog/2025-02-26-kubernetes-golden-tickets/
positronsecurity.com
https://kubernetes.io/docs/tasks/tls/manual-rotation-of-ca-certificates/
kubernetes.io
https://github.com/aquasecurity/kube-bench
github.com
https://github.com/ReversecLabs/IceKube
github.com
https://kubehound.io/
kubehound.io
https://raesene.github.io/
raesene.github.io
https://grahamhelton.com/
grahamhelton.com
https://github.com/heilancoos/k8s-custom-detections/blob/main/lab-setup/setup.sh
github.com
https://github.com/heilancoos/k8s-custom-detections/tree/main
github.com