skills.rest
Prohao42
Prohao42COMMUNITY
Explore all skills by this author →
GitHub

kubernetes-pentesting

Enumerate Kubernetes API server exposure, RBAC, and cloud metadata vulnerabilities.

120|8|Updated Jun 2, 2026
Search Tags:#rbac#kubernetes#pentesting#security-assessment#etcd#api-server#kubelet
One-click install
npx skills add https://github.com/Prohao42/aimy-sikll --skill kubernetes-pentesting-prohao42
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: kubernetes-pentesting
Source: https://github.com/Prohao42/aimy-sikll/tree/main/ai-mian/hack-skills/skills/kubernetes-pentesting
Command: npx skills add https://github.com/Prohao42/aimy-sikll --skill kubernetes-pentesting-prohao42

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Kubernetes penetration testing playbook helps security teams identify API server exposure, RBAC misconfigurations, service account abuses, etcd access, Kubelet API exposure, and cloud metadata weaknesses. The playbook consolidates expert attack techniques into a reproducible workflow for assessing cluster security.

Core Features & Use Cases

  • API server access assessment and anonymous/authenticated access checks
  • RBAC enumeration and privilege escalation analysis
  • Service account token abuse assessment
  • Etcd access checks and secret discovery
  • Kubelet API exposure paths and container escape vectors
  • Cloud metadata exposure checks (IMDS/metadata) for AWS/GCP/Azure
  • Admission webhook bypass strategies

Quick Start

Initiate a Kubernetes security assessment by outlining an API server access check, RBAC enumeration, and token abuse tests.

Frequently Asked Questions about kubernetes-pentesting

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enumerate Kubernetes API server exposure during a pentest?▼

To enumerate Kubernetes API server exposure, you identify anonymous access, token-based authentication, and kubeconfig-based access to determine the overall risk posture of the cluster.

Can I test for Kubernetes RBAC misconfigurations and privilege escalation?▼

Yes, you can assess RBAC configurations by enumerating permissions and analyzing service account tokens to identify potential privilege escalation vectors within the Kubernetes environment.

How do I assess Kubelet API exposure and etcd access safely?▼

You assess Kubelet API exposure and etcd access using safe, non-destructive testing patterns to discover container escape vectors and exposed secrets without impacting production clusters.

Does this Kubernetes security assessment check cloud metadata service vulnerabilities?▼

Yes, this Kubernetes security assessment checks cloud metadata service exposure across AWS, GCP, and Azure, identifying potential IMDS vulnerabilities and providing actionable mitigation strategies.

What is the best way to get a structured remediation plan for Kubernetes pentesting findings?▼

The best way to get a structured remediation plan is to run an assessment that provides actionable findings and recommended mitigations while ensuring robust validation of Kubernetes security vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
theslashdojotheslashdojo

aks

Create and manage AKS clusters, sync kubeconfig credentials, and add node pools via Azure CLI.

Official
Intermediate
majiayu000majiayu000
258

server-security

Audit Linux server security and generate hardening plans with remediation templates.

Community
Advanced
rnavarychrnavarych
14

role-devops:kubernetes-expert

Design, deploy, and manage Kubernetes workloads and infrastructure.

Community
Advanced
vib795vib795

canary

Monitor live production endpoints for console errors and performance regressions.

Community
Advanced