About
In this module of the Kubernetes Security learning path, you take the attacker's seat and practice attacking clusters, because to defend a cluster you must be able to break it. A Kubernetes attacker rarely needs a zero-day: exposed registries, Docker-in-Docker build pods, NodePort services, privileged containers, and sloppy RBAC provide more than enough. This module follows an offensive workflow from reconnaissance through container escape and cluster-wide lateral movement, using practice scenarios that mirror real engagements. You map the attack surface against the threat matrix, exploit exposed services and components, escape a pod to the node, abuse RBAC to pivot across namespaces, and close with the cr8escape CVE as an end-to-end case study. Upon completion of the module, students will be able to: • Enumerate a cluster's exposed surface and map findings to attacker techniques in the threat matrix. • Compromise or extract secrets from exposed control-plane and node components. • Gain an initial foothold by exploiting a misconfigured, exposed service. • Escape a privileged container to the node and escalate across namespaces via RBAC abuse. For inquiries, please write us at https://www.darkrelay.com/cybersecurity-course-inquiry