PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Bad Pods: Kubernetes Pod Privilege Escalation

bishopfox.com | vulnerability | #cloud-security | #kubernetes | #container-security | #privilege-escalation | #misconfiguration | #bad-pods
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Seth Art's Bad Pods research catalogs eight insecure Kubernetes pod configurations that enable privilege escalation, with test manifests and advice on enforcing least privilege by default.
Published
Collected

Related coverage

research · calif.io
Privilege escalation in AWS Elastic Kubernetes Service
# Privilege escalation in AWS Elastic Kubernetes Service How a pod with the wrong permissions becomes control of the whole cluster. An Trinh and Duc Nguyen April 2, 2023 cloud Update · August 19,...
vulnerability · netspi.com
Lessons Learned From The Kubernetes Man-in-the-Middle Vulnerability
Kubernetes CVE-2020-8554 is a design-level MitM flaw affecting all versions and unpatchable: tenants with routing control can intercept other tenants' traffic, a multi-tenant isolation lesson.
blog · bishopfox.com
Zilliz / Attu | 2.6.5
Bishop Fox disclosed two flaws in Zilliz Attu 2.6.5, the Milvus management UI. An unauthenticated SSRF combined with a regex validation bypass chains into Kubernetes namespace takeover, exposing entire clusters to attackers.
blog · xbow.com
MITRE ATT&CK Coverage Assessment: How to Measure Defensive Readiness
Most ATT&CK coverage heatmaps are built on assertion, not evidence. Here’s the methodology that makes numbers defensible, with the help of autonomous continuous testing.
incident · hackenproof.com
Nokia Data Breach: Exposed etcd Server Leaked Infrastructure Credentials
An unsecured etcd server exposed Nokia's internal passwords, SSH keys, and AWS secrets—what was found, Nokia's response, and why etcd exposures still happen today.
blog · hunt.io
Over 68 GB of Philippine Overseas-Employment Database Backups Copied From an Exposed Staging Server
An exposed staging server at UpCloud revealed a completed 68 GB copy of 27 Philippine overseas-employment database backups, a rebranded GodPotato privilege escalation tool, and the operator's own transfer logs.
Back