WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2022 β€’ Jun 15, 2022

Hacking Kubernetes: Live Demo Marathon

Andrew Martin

How fast can a single npm dependency compromise your Kubernetes cluster? Watch this live demonstration break container isolation to prove why active intrusion tripwires are your only failsafe.

Pause
Mute Enter Fullscreen
#1 about 5 min

Mapping the attack surface of a Kubernetes cluster

Starting a penetration test requires understanding how Linux container namespaces and orchestrator abstractions interact.

#2 about 7 min

Threat modeling techniques for cloud native infrastructure

Modeling adversaries from script kiddies to organized crime helps build proportionate and cost-effective security controls.

#3 about 7 min

Executing a software supply chain attack with dependencies

Abusing execution hooks in package managers allows attackers to steal context and establish reverse shells.

#4 about 9 min

Breaking out of overprivileged pods using host mapping

Misconfigured security policies that share the host process ID space allow attackers to manipulate root namespaces.

#5 about 10 min

Escaping unprivileged containers using the Dirty Pipe exploit

Overwriting out-of-bounds executable memory via execution symlinks allows an attacker to gain a root shell directly on the underlying host node.

#6 about 9 min

Pivoting from a compromised kubelet to cloud accounts

Enumerating orchestrator-injected secrets mapped on host volumes reveals credentials that can escalate privileges into wider cloud environments.

#7 about 3 min

Discussing container privilege escalation and volume security risks

Audience questions clarify the limits of rootless containers and highlight security risks introduced by shared volume mounts.

Matching moments

5:59 min

Live demonstration of vulnerability exploitation and zero trust mitigation

Jan Peer StΓΆcklmair Jan Peer StΓΆcklmair Β· World Congress 2026 Europe

4:40 min

Assessing common Kubernetes security incidents and misconfigurations

Rico Komenda Rico Komenda Β· World Congress 2025

1:39 min

Introduction to Kubernetes security challenges and opportunities

Marc Nimmerrichter Β· World Congress 2022

5:28 min

Executing a DNS exfiltration attack in Kubernetes

Ali Alp Ali Alp Β· World Congress 2026 Europe

4:27 min

Identifying software vulnerabilities and typical configuration weaknesses

Marc Nimmerrichter Β· World Congress 2022

5:44 min

Demonstrating a container escape using kernel vulnerabilities

Marc Nimmerrichter Β· World Congress 2022

More from World Congress 2022

What the heck do "declarative" and "reactive" actually mean? thumbnail
30:40
about 4 years ago

What the heck do "declarative" and "reactive" actually mean?

AndrΓ© Kovac

The Design and Evolution of C++ thumbnail
1:01:15
over 4 years ago

The Design and Evolution of C++

Bjarne Stroustrup

But, you're not Facebook thumbnail
31:12
over 4 years ago

But, you're not Facebook

Kristijan Ristovski

Communicate efficiently with Software Architecture Diagrams thumbnail
28:11
over 4 years ago

Communicate efficiently with Software Architecture Diagrams

Simon Lasselsberger

Get Ready for Jakarta EE 10! thumbnail
42:53
over 4 years ago

Get Ready for Jakarta EE 10!

Ivar Grimstad

Keep your code refactorable thumbnail
26:46
over 4 years ago

Keep your code refactorable

Gerrit Stapper

Related videos

From Build to Breach: Hacking Kubernetes Through the Supply Chain thumbnail
31:38
World Congress 2026 Europe β€’ 3 months ago

From Build to Breach: Hacking Kubernetes Through the Supply Chain

Ali Alp

Kubernetes Security - Challenge and Opportunity thumbnail
42:45
World Congress 2022 β€’ over 4 years ago

Kubernetes Security - Challenge and Opportunity

Marc Nimmerrichter

Kubernetes Security Best Practices thumbnail
23:08
World Congress 2025 β€’ about 1 year ago

Kubernetes Security Best Practices

Rico Komenda

Stranger Danger: Your Java Attack Surface Just Got Bigger thumbnail
1:58:59
LIVE β€’ over 4 years ago

Stranger Danger: Your Java Attack Surface Just Got Bigger

Vandana Verma Sehgal

Turning Container security up to 11 with Capabilities thumbnail
28:47
World Congress 2023 β€’ about 3 years ago

Turning Container security up to 11 with Capabilities

Mathias Tausig

Beyond SBOMs: The Future of Container Supply Chain Security thumbnail
30:38
World Congress 2026 Europe β€’ 3 months ago

Beyond SBOMs: The Future of Container Supply Chain Security

Mohammad-Ali A'rΓ’bi

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.