skills.rest
Skobyn
SkobynCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

hunt-k8s

Identify and exploit security vulnerabilities in Kubernetes and Docker environments.

Updated Jun 24, 2026
Search Tags:#Docker#vulnerability assessment#security audit#Kubernetes#RCE
One-click install
npx skills add https://github.com/Skobyn/talon --skill hunt-k8s-skobyn
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-k8s
Source: https://github.com/Skobyn/talon/tree/main/skills/hunt-k8s
Command: npx skills add https://github.com/Skobyn/talon --skill hunt-k8s-skobyn

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill detects and exploits vulnerabilities in Kubernetes and Docker environments, helping to secure containerized infrastructures.

Core Features & Use Cases

  • Kubernetes API Access: Detects anonymous cluster-admin access and misconfigurations.
  • Kubelet Exploitation: Identifies and exploits kubelet-related vulnerabilities like RCE.
  • etcd Unauthenticated Access: Discovers unauthenticated access to etcd and leaks credentials.
  • Docker Socket Abuse: Exploits Docker socket vulnerabilities for SSRF and RCE.
  • Container Escape: Finds and exploits container escape vulnerabilities in runc.
  • Use Case: Use this Skill to audit a Kubernetes cluster for potential security issues, especially in environments where containerized applications are used.

Quick Start

Use the hunt-k8s skill to fingerprint and enumerate open ports on the target Kubernetes cluster.

Frequently Asked Questions about hunt-k8s

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I exploit Kubernetes API misconfigurations like anonymous cluster-admin access?▼

Kubernetes API exploitation detects anonymous cluster-admin access and misconfigurations by fingerprinting the cluster's open ports and enumerating exposed API endpoints to identify insecure permissions and access controls.

What is the best way to audit a Docker socket for SSRF and RCE vulnerabilities?▼

Auditing a Docker socket for SSRF and RCE vulnerabilities involves exploiting exposed socket configurations to execute unauthorized commands, allowing you to detect and secure containerized infrastructure against socket abuse.

How does unauthenticated etcd access lead to credential leaks in Kubernetes?▼

Unauthenticated etcd access allows attackers to discover and extract sensitive cluster data, leaking credentials stored within the key-value store by bypassing authentication mechanisms to directly query the database.

Can I use this to test for runc container escape vulnerabilities?▼

Yes, you can test for runc container escape vulnerabilities by finding and exploiting specific weaknesses in the container runtime, allowing you to identify potential breakout paths from the containerized environment.

Do I need prior knowledge of Kubernetes internals to exploit kubelet RCE?▼

Yes, exploiting kubelet RCE requires knowledge of Kubernetes and Docker internals along with associated CVEs to successfully identify and execute remote code exploitation against vulnerable kubelet configurations.

Why should I perform a security audit on my Kubernetes cluster's kubelet?▼

Performing a security audit on your Kubernetes cluster's kubelet helps identify and exploit kubelet-related vulnerabilities like RCE, ensuring you detect and secure remote code execution paths before they are compromised.

Related Skills

Explore More Software Engineering Skills→
thc1006thc1006

security-advisory

Track Kubernetes CVEs and patch guidance for cluster environments.

Community
Advanced
bpnrockstarbpnrockstar

hunt-k8s

Scan Kubernetes and Docker environments for security vulnerabilities and misconfigurations.

Community
Advanced
uphiagouphiago
1.1k

hunt-k8s

Detect Kubernetes and Docker security misconfigurations and privilege escalation paths.

Community
Advanced
alicangnllalicangnll

Container Escape

Detect container escape vulnerabilities and privilege escalation paths in Docker and Kubernetes environments.

Community
Advanced