Orchestration

Attacking the orchestration layer that schedules and manages containers across a fleet of hosts. Kubernetes is the dominant target: enumerating the cluster, reaching exposed components, escalating through RBAC, escaping a pod to its node, moving laterally, and persisting.

1 phút đọccập nhật 7 thg 10, 2026florianamette1 người đóng góp
Hỏi trợ lý của bạn (MCP)Sửa trên GitHub

Orchestration schedules containers across many hosts and gives them a shared identity, network, and secret store. That control plane is the attack surface: compromising it reaches every workload and node at once. Kubernetes is the overwhelming target, so this layer is organized around it, from first foothold in a pod through cluster takeover and persistence.

Subtopics#

  • Kubernetes: the dominant orchestrator, attacked from a pod foothold up to full cluster control.

References#