K8s Runtime Attack Scenarios-2

In this article, I will show you to read the sensitive files in the container running in the K8s environment, both by using the application that has the vulnerability and by connecting pod with kubectl.

Introduction

Purpose of attack

In this attack scenario, I will use the Docker image of the .NET Core API application that I have developed before and which has many web vulnerabilities. By using the 2 different vulnerabilities on this application and connecting with pod with …

application security container security cybersecurity kubernetes security pentest