Kubernetes From an Attacker's Perspective

Originally published as part of talk given at fwd:CloudSec 2020

Slides

Video

Proof of Concept

The following PodSpec was used to demonstrate Pod escape to access node using hostPath volume mount.