WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2022 • Jun 15, 2022

Hacking Kubernetes: Live Demo Marathon

Andrew Martin

How fast can a single npm dependency compromise your Kubernetes cluster? Watch this live demonstration break container isolation to prove why active intrusion tripwires are your only failsafe.

Pause
Mute Enter Fullscreen
#1 about 5 min

Mapping the attack surface of a Kubernetes cluster

Starting a penetration test requires understanding how Linux container namespaces and orchestrator abstractions interact.

#2 about 7 min

Threat modeling techniques for cloud native infrastructure

Modeling adversaries from script kiddies to organized crime helps build proportionate and cost-effective security controls.

#3 about 7 min

Executing a software supply chain attack with dependencies

Abusing execution hooks in package managers allows attackers to steal context and establish reverse shells.

#4 about 9 min

Breaking out of overprivileged pods using host mapping

Misconfigured security policies that share the host process ID space allow attackers to manipulate root namespaces.

#5 about 10 min

Escaping unprivileged containers using the Dirty Pipe exploit

Overwriting out-of-bounds executable memory via execution symlinks allows an attacker to gain a root shell directly on the underlying host node.

#6 about 9 min

Pivoting from a compromised kubelet to cloud accounts

Enumerating orchestrator-injected secrets mapped on host volumes reveals credentials that can escalate privileges into wider cloud environments.

#7 about 3 min

Discussing container privilege escalation and volume security risks

Audience questions clarify the limits of rootless containers and highlight security risks introduced by shared volume mounts.

Matching moments

5:59 min

Live demonstration of vulnerability exploitation and zero trust mitigation

Jan Peer Stöcklmair Jan Peer Stöcklmair · WWC Europe 2026

4:40 min

Assessing common Kubernetes security incidents and misconfigurations

Rico Komenda Rico Komenda · WWC 2025

1:39 min

Introduction to Kubernetes security challenges and opportunities

Marc Nimmerrichter · WWC 2022

5:28 min

Executing a DNS exfiltration attack in Kubernetes

Ali Alp Ali Alp · WWC Europe 2026

4:27 min

Identifying software vulnerabilities and typical configuration weaknesses

Marc Nimmerrichter · WWC 2022

5:44 min

Demonstrating a container escape using kernel vulnerabilities

Marc Nimmerrichter · WWC 2022

More from World Congress 2022

What the heck do "declarative" and "reactive" actually mean? thumbnail
30:40
almost 4 years ago

What the heck do "declarative" and "reactive" actually mean?

André Kovac

The Design and Evolution of C++ thumbnail
1:01:15
about 4 years ago

The Design and Evolution of C++

Bjarne Stroustrup

But, you're not Facebook thumbnail
31:12
about 4 years ago

But, you're not Facebook

Kristijan Ristovski

Communicate efficiently with Software Architecture Diagrams thumbnail
28:11
about 4 years ago

Communicate efficiently with Software Architecture Diagrams

Simon Lasselsberger

Get Ready for Jakarta EE 10! thumbnail
42:53
about 4 years ago

Get Ready for Jakarta EE 10!

Ivar Grimstad

Keep your code refactorable thumbnail
26:46
about 4 years ago

Keep your code refactorable

Gerrit Stapper

Upcoming sessions on this topic

Open session

World Congress 2026 North America

Stop Running Mystery Meat in Production

Jeroen van Erp

Technical Advocate @ SUSE

Jeroen van Erp
Open session

World Congress 2026 North America

rm -rf: Horror Stories From Unsandboxed AI Agents (and How Docker Fixes This)

Rishab Kumar

Staff Developer Evangelist @ Twilio

Rishab Kumar
Open session

World Congress 2026 North America

Know Your Enemies: Live Exploit of a PHP Engine Security Breach

Alexandre Daubois

CTO of Les-Tilleuls.coop / Symfony Core Team / PHP & FrankenPHP Core Maintainer

Alexandre Daubois
Open session

World Congress 2026 North America

Run your agents in Kubernetes: Build once, deploy anywhere. But really?

Michal Salanci

Senior Systems Engineer at ESET Cybersecurity

Michal Salanci
Open session

World Congress 2026 North America

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy
Open session

World Congress 2026 North America

Red Teaming Your LLM App -- A Hands-On Threat Model You Can Reuse

Saloni Garg

Senior ML Engineer at Adobe

Saloni Garg

Related videos

From Build to Breach: Hacking Kubernetes Through the Supply Chain thumbnail
31:38
WWC Europe 2026 • about 1 month ago

From Build to Breach: Hacking Kubernetes Through the Supply Chain

Ali Alp

Kubernetes Security - Challenge and Opportunity thumbnail
42:45
WWC 2022 • about 4 years ago

Kubernetes Security - Challenge and Opportunity

Marc Nimmerrichter

Kubernetes Security Best Practices thumbnail
23:08
WWC 2025 • 12 months ago

Kubernetes Security Best Practices

Rico Komenda

Stranger Danger: Your Java Attack Surface Just Got Bigger thumbnail
1:58:59
LIVE • over 4 years ago

Stranger Danger: Your Java Attack Surface Just Got Bigger

Vandana Verma Sehgal

Turning Container security up to 11 with Capabilities thumbnail
28:47
WWC 2023 • almost 3 years ago

Turning Container security up to 11 with Capabilities

Mathias Tausig

Beyond SBOMs: The Future of Container Supply Chain Security thumbnail
30:38
WWC Europe 2026 • about 1 month ago

Beyond SBOMs: The Future of Container Supply Chain Security

Mohammad-Ali A'râbi

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.