Discover and read the best of Twitter Threads about #azurekubernetesservice
Most recents (2)
How a simple web-app assessment lead to complete #AzureAd tenant takeover 🤯
🧵 👇
#Azure #AzureKubernetesService #aks #Kubernetes #KubernetesSecurity #k8s #bugbounty #bugbountytips #bugbountytip #DevSecOps
🧵 👇
#Azure #AzureKubernetesService #aks #Kubernetes #KubernetesSecurity #k8s #bugbounty #bugbountytips #bugbountytip #DevSecOps
1. Poorly-designed file upload functionality lead to RCE
2. Turned out the app was running in a container managed by #AzureKubernetesService (#AKS)
3. #Container was mounting a service account with permissions to deploy #pods in the same namespace
2. Turned out the app was running in a container managed by #AzureKubernetesService (#AKS)
3. #Container was mounting a service account with permissions to deploy #pods in the same namespace
4. I deployed a new pod with hostPath root volume. Deployment was not blocked by any security policy. #Pod got deployed
5. I exec-ed into the pod's #container and escaped it through its hostPath volume. #privesc to the #AKS node succeeded!
5. I exec-ed into the pod's #container and escaped it through its hostPath volume. #privesc to the #AKS node succeeded!
📬 My weekly thread with news, insights, and upcoming topics.
It will be a shorter thread this week. I took a few days off after #CDS22.
Today featuring #Kubernetes, #Azure, #ContainerDays, #eBPF, #OPA, and more...
A thread 🧵
It will be a shorter thread this week. I took a few days off after #CDS22.
Today featuring #Kubernetes, #Azure, #ContainerDays, #eBPF, #OPA, and more...
A thread 🧵
Talking about @ConDaysEU. Don't miss to check about all the news and stuff going on on Twitter.
@ConDaysEU and #CDS22 are good starting points to follow up.
I had the pleasure to deliver multiple talks.
@ConDaysEU and #CDS22 are good starting points to follow up.
I had the pleasure to deliver multiple talks.
The @kinvolkio folks shared a post on "Porting an #eBPF-based application to #arm64".
Find all the details and limitations below 👇
kinvolk.io/blog/2022/09/p…
Find all the details and limitations below 👇
kinvolk.io/blog/2022/09/p…
