AKS

Attacking Azure Kubernetes Service from the cloud plane: admin credentials, command invoke, and node-pool managed identity through IMDS.

1 മിനിറ്റ് വായന2026 ഒക്ടോ 7-ന് അപ്ഡേറ്റ് ചെയ്തുflorianamette1 സംഭാവകൻ
നിങ്ങളുടെ അസിസ്റ്റന്റിനോട് ചോദിക്കുക (MCP)GitHub-ൽ എഡിറ്റ് ചെയ്യുക

Azure Kubernetes Service bridges the Azure management plane and the Kubernetes API, so an Azure foothold becomes in-cluster power two ways: pull the cluster's admin kubeconfig, or run commands in the cluster through the management plane. Separately, each node pool carries a managed identity that a pod can reach through IMDS.

Pages#

  • Cluster access: listClusterAdminCredential and managedClusters runCommand.
  • Node identity: the node pool kubelet and managed identity through IMDS.

Generic in-cluster Kubernetes attacks (RBAC, service-account tokens, pod escape) live in the Containers area; these pages stay on the AKS cloud-plane and node-identity angle.

References#

മുമ്പത്തേത്User dataഅടുത്തത് Cluster access