EncryptCodecencryptcodec
Simulations/Kubernetes Pod Escape

Kubernetes Pod Escape

Advanced

You have shell access inside a Kubernetes pod. Read the auto-mounted service account token, query the Kubernetes API to access cluster secrets, then learn how to lock down pod permissions.

Progress:
1
Access the Kubernetes API
2
Secure the Pod
root@web-app-7d8f9:/app#
Cluster Security Settings
root@web-app-7d8f9:/app#

Challenges

1
Access the Kubernetes API
Read the service account token from the pod filesystem and use it to query the Kubernetes API.
▼ hints
2
Secure the Pod
Apply RBAC restrictions and disable automatic service account token mounting.
▼ hints
How to fix Kubernetes pod security
RBAC, disable automount, and pod security standards
▼

Frequently Asked Questions