About
In this module of the Kubernetes Security learning path, you learn pentesting methodology for mapping a cluster's posture before exploiting anything. Kubernetes assessments fail when they are unstructured, so this module establishes the objectives and phases of an engagement and the tooling that turns a large, opaque cluster into a prioritized list of findings. You stand up deliberately vulnerable applications to practice against, then drive the vulnerability-assessment workflow: scanning images, auditing configuration against benchmarks, and analyzing RBAC to find over-permissioned identities. This is the bridge between knowing how a cluster works and being able to attack it safely. Upon completion of the module, students will be able to: • Plan and scope a Kubernetes engagement using a structured, repeatable methodology. • Deploy a vulnerable workload and confirm the attack paths it exposes. • Scan images and cluster configuration with Trivy, Kubescape, and kube-bench and triage the findings. • Enumerate effective permissions with `kubectl auth can-i` and Rakkess and flag privilege-escalation paths. For inquiries, please write us at https://www.darkrelay.com/cybersecurity-course-inquiry