Kubernetes, often called K8s, is an open-source platform designed to automate the deployment, scaling, and operations of containerized applications.
Kubernetes has become a critical part of the infrastructure for many organizations.
With its widespread adoption, Kubernetes environments have also become a target for cyber threats.
In this article, we present powerful open-source tools designed for you to use for Kubernetes pentesting.
Kube-bench is a tool that checks whether Kubernetes is deployed securely by running the checks documented in the CIS Kubernetes Benchmark.
Tests are configured with YAML files, making this tool easy to update as test specifications evolve.
KubiScan helps cluster administrators identify permissions that attackers could potentially exploit to compromise the clusters.
This can be especially helpful on large environments where there are lots of permissions that can be challenging to track.
KubiScan gathers information about risky rolesclusterroles, rolebindingsclusterrolebindings, users and pods, automating traditional manual processes and giving administrators the visibility they need to reduce risk.
Kubetap is a kubectl plugin that enables an operator to deploy intercepting proxies for Kubernetes Services quickly.
Kubetap allows testers to select a target Service and intercept all traffic destined for that Service, regardless of where the requests originate.
The transparency and visibility afforded by Kubetap allow testers to better understand and exercise the Service without the prohibitively time cost of configuring and deploying a proxy manually.
Microservices deep in a technology stack that were once inaccessible to testers can now be proxied easily.
Peirates is a Kubernetes penetration tool that enables an attacker to escalate privilege and pivot through a Kubernetes cluster.
It automates known techniques to steal and collect service account tokens, secrets, obtain further code execution, and gain cluster control.
This Cyber News was published on www.helpnetsecurity.com. Publication date: Wed, 06 Dec 2023 05:13:04 +0000