Orchestration

Attacking the orchestration layer that schedules and manages containers across a fleet of hosts. Kubernetes is the dominant target: enumerating the cluster, reaching exposed components, escalating through RBAC, escaping a pod to its node, moving laterally, and persisting.

ဖတ်ချိန် ၁ မိနစ်၂၀၂၆ အောက် ၇ တွင် ပြင်ဆင်ခဲ့သည်florianametteပါဝင်ကူညီသူ ၁ ဦး
သင့်လက်ထောက်တွင် မေးရန် (MCP)GitHub တွင် ပြင်ရန်

Orchestration schedules containers across many hosts and gives them a shared identity, network, and secret store. That control plane is the attack surface: compromising it reaches every workload and node at once. Kubernetes is the overwhelming target, so this layer is organized around it, from first foothold in a pod through cluster takeover and persistence.

Subtopics#

  • Kubernetes: the dominant orchestrator, attacked from a pod foothold up to full cluster control.

References#