Orchestration

Attacking the orchestration layer that schedules and manages containers across a fleet of hosts. Kubernetes is the dominant target: enumerating the cluster, reaching exposed components, escalating through RBAC, escaping a pod to its node, moving laterally, and persisting.

1분 분량2026년 10월 7일 업데이트florianamette기여자 1명
어시스턴트에게 묻기 (MCP)GitHub에서 편집

Orchestration schedules containers across many hosts and gives them a shared identity, network, and secret store. That control plane is the attack surface: compromising it reaches every workload and node at once. Kubernetes is the overwhelming target, so this layer is organized around it, from first foothold in a pod through cluster takeover and persistence.

Subtopics#

  • Kubernetes: the dominant orchestrator, attacked from a pod foothold up to full cluster control.

References#