Orchestration

Attacking the orchestration layer that schedules and manages containers across a fleet of hosts. Kubernetes is the dominant target: enumerating the cluster, reaching exposed components, escalating through RBAC, escaping a pod to its node, moving laterally, and persisting.

阅读约 1 分钟更新于 2026年10月7日florianamette1 位贡献者
在你的助手中提问(MCP)在 GitHub 上编辑

Orchestration schedules containers across many hosts and gives them a shared identity, network, and secret store. That control plane is the attack surface: compromising it reaches every workload and node at once. Kubernetes is the overwhelming target, so this layer is organized around it, from first foothold in a pod through cluster takeover and persistence.

Subtopics#

  • Kubernetes: the dominant orchestrator, attacked from a pod foothold up to full cluster control.

References#