Cybersecurity
Hunt K8s
Hunt Kubernetes & Docker — API anonymous access, kubelet 10250 exec (SPDY/WebSocket, NOT plain POST) and the simpler /run primitive, etcd 2379 unauth, dashboard skip-login, RBAC misconfig, secret/SA-token abuse, docker.sock host escape, runc/container-escape (Leaky Vessels CVE-2024-21626), API-server-mediated nodes/proxy RCE, EphemeralContainers node-shell, bound/projected SA-token audience+expiry abuse, admission-controller bypass, Helm/Tiller remnants. Use when target runs containerized infra, exposes K8s ports (6443/10250/10255/2379/8443), or cloud metadata reveals K8s service accounts.
- Publisher / source
- elementalsouls/Claude-BugHunter (found on GitHub top repositories)
- Upstream record
- elementalsouls/Claude-BugHunter
- Version
- Version 1
- Published
- Publication review
- Approved for publication
- Content fingerprint
4598198a99ed4443603282d8ce2c1dabb382573ac23ac64aab029edbe921148f