kubernetes-pentesting

What problem does it solve?

Kubernetes pentesting playbook helps security teams identify misconfigurations and attack paths in Kubernetes clusters, enabling structured, authorized assessments and risk reduction.

Core Features & Use Cases

• API server access checks and anonymous access checks
• RBAC enumeration and dangerous permissions discovery
• Service account token abuse, etcd data discovery, and Kubelet API exploitation
• Cloud IMDS access checks for AWS EKS, GKE, and AKS
• Admission webhook bypass considerations and registry secret exposure

Quick Start

Execute a scoped test against a lab cluster to enumerate RBAC permissions and verify access to etcd and the Kubelet API.