k8s-network-recon

Kubernetes service discovery from a Pod involves enumerating internal services and endpoints using DNS PTR lookups, SRV enumeration, and AXFR zone transfers. This maps internal cluster services for lateral reconnaissance.

The best way to enumerate cluster-internal services from a Pod shell is using K8Spider to automate DNS PTR lookups, SRV enumeration, and AXFR transfers. This reveals hidden services and clarifies targets within the cluster.

Yes, K8Spider requires proper DNS configuration and access to the Pod to perform in-cluster reconnaissance. It relies on these DNS settings to execute PTR/SRV/AXFR scans and accurately map internal service endpoints.

DNS PTR lookups help Kubernetes network reconnaissance by reverse-resolving IP addresses to service domain names. This technique identifies internal cluster services and endpoints from within a Pod environment.

Yes, you can perform AXFR zone transfers to map Kubernetes internal networks. When executed from a Pod with proper DNS configuration, AXFR transfers enumerate available service records alongside SRV enumeration and PTR lookups.

You should use SRV enumeration for Kubernetes service discovery when you need to identify available services and their listening ports from within a Pod. It effectively maps internal endpoints during lateral reconnaissance operations.