Orchestration

Attacking the orchestration layer that schedules and manages containers across a fleet of hosts. Kubernetes is the dominant target: enumerating the cluster, reaching exposed components, escalating through RBAC, escaping a pod to its node, moving laterally, and persisting.

อ่าน 1 นาทีอัปเดต 7 ต.ค. 2569florianametteผู้ร่วมพัฒนา 1 คน
ถามผู้ช่วยของคุณ (MCP)แก้ไขบน GitHub

Orchestration schedules containers across many hosts and gives them a shared identity, network, and secret store. That control plane is the attack surface: compromising it reaches every workload and node at once. Kubernetes is the overwhelming target, so this layer is organized around it, from first foothold in a pod through cluster takeover and persistence.

Subtopics#

  • Kubernetes: the dominant orchestrator, attacked from a pod foothold up to full cluster control.

References#