AKS

Attacking Azure Kubernetes Service from the cloud plane: admin credentials, command invoke, and node-pool managed identity through IMDS.

1 мин читањаажурирано 7. окт 2026.florianamette1 сарадник
Питајте асистента (MCP)Уреди на GitHub-у

Azure Kubernetes Service bridges the Azure management plane and the Kubernetes API, so an Azure foothold becomes in-cluster power two ways: pull the cluster's admin kubeconfig, or run commands in the cluster through the management plane. Separately, each node pool carries a managed identity that a pod can reach through IMDS.

Pages#

  • Cluster access: listClusterAdminCredential and managedClusters runCommand.
  • Node identity: the node pool kubelet and managed identity through IMDS.

Generic in-cluster Kubernetes attacks (RBAC, service-account tokens, pod escape) live in the Containers area; these pages stay on the AKS cloud-plane and node-identity angle.

References#

ПретходнаUser dataСледећа Cluster access