Hacking a Kubernetes Cluster: A Practical Example!

[@KodeKloud]

Full Certified Kubernetes Application Developer (CKAD) Course: kode.wiki/CKAD_YT

[@lhxperimental]

Not a realistic production scenario. Webservers/Load Balancers are usually on a different server and network than the Kubernetes cluster. The cluster itself has no direct internet connectivity and only ports exposed to the world are the HTTP(S) ports of the load balancers

[@AndresLeonRangel]

you will be surprised to know that some companies actually have scenarios like this one...

[@okharev8114]

if only

[@abdurrahmanhr]

Great clip with crisp coverage on security

[@KodeKloud]

Glad you enjoyed it! Please subscribe to our channel and keep supporting😊

[@tendaimusonza9547]

Wonderful, great hands on presentation

[@KodeKloud]

Many thanks! Please subscribe and encourage us to create more such quality content.

[@anthonydelagarde3990]

Thank you a fantastic video and demonstration

[@KodeKloud]

Glad it was helpful!

[@manojpansare2007]

Excellent and eye opener....👌👌👌

[@KodeKloud]

Glad you liked it! Thanks:)

[@ramakrishnabommerla3176]

amazing explanation :) great use-case

[@ileriayoadebiyi]

That election story surely was scary!!! Great video, Mumshad! Always love your videos!

[@KodeKloud]

Glad you liked it! Please subscribe and encourage us to create more such quality content.

[@ileriayoadebiyi]

What!?? Never knew I wasn’t subscribed 😭 By the way, all my DevOps friends and wannabes are tired of me talking about kodekloud

[@makevoid]

From 2021 Kubernetes (v1.20+) removes the default dependency on docker in favour of containerd. This "attack" may work on a badly configured Kubernetes version prior to that and also on a poorly configured docker swarm cluster.

[@tendaimusonza9547]

I subscribed within the first few seconds of hearing the quality stuff ,lol

[@matteobaiguini5940]

can you please share the material you used for the demo? maybe a git repo?

[@KASANITEJ]

I can understand ssh port being open by mistake.... but I can't wrap around why docker port is opened?

[@asadkhanuit]

Very good demo for people who don't know about hacking

[@rishabhjain2940]

What is this tools for port scanning? And where I can get it ?

[@durden0]

Do people really run their docker hosts with no authentication and their kubernetes dashboards exposed to the internet?

[@EderNucci]

No. :-D

[@EderNucci]

Having the docker port exposed is simply the most stupid thing I think someone can do on a cluster. Why they did this?

[@thehackingexplorer3636]

Because they are dog lovers. LoL

[@kubectlgetpo]

No one did it.. it's made up scenario that teaches theater security

[@EderNucci]

@@kubectlgetpo watch again at 0:40 :-)

[@CipherNL]

I find it even more fascinating how the http and https ports are not open.

[@kubectlgetpo]

@@CipherNL yeah crap scenario all around

[@nestorreveron]

Awesome 👌

[@aldyj4733]

This is the epitome of one jumps into kubernetes too quickly without regards to any best practices (pain points: exposed docker port + conn string as env var) whatsoever...

[@aldyj4733]

And sadly, the majority of people still do this...

[@KodeKloud]

Yes, that's true.

[@mafujaakhtar9876]

Hi Mumshad brother, is it possible to be a DevOps engineer for a non tech person? I am an an anthropologist, had career break for children now I got interested in cloud. I am a certified cloud practitioners and courntly I am doing cybersecurity program. I am interested about cloud security though I am new in this field. How long need to I have to work in cloud then I can try for the cloud security? I am a mother of two teenage kids and fourty plass cloud savvy.

[@KodeKloud]

Certainly, transitioning into a DevOps or cloud security role is achievable, even without a traditional tech background. With your Cloud Practitioner certification, explore advanced cloud certifications and gain hands-on experience. Learn automation tools and DevOps practices. Leverage your unique background in anthropology for soft skills. Focus on cloud security by building on your existing cloud knowledge and pursuing security certifications.

[@ismaelgrahms]

Great content

[@KodeKloud]

Thanks:)

[@LuizJrDeveloper]

How did you put an icon in ZSH?

[@KodeKloud]

You can use powerlevel10k for custom ZSH

[@tomknud]

100% !

[@KodeKloud]

Thank you so much : ) We are glad to be a part of your learning journey

[@bestviraltubeshorts]

Someone know how can i put a logo in my zsh terminal, like that?

[@tengiz]

Marvellous

[@KodeKloud]

Thanks👍 Please subscribe and encourage us to provide more such quality content.

[@anathema157]

By default docker running only as Unix service

[@abhishekjaiswal5239]

where can we get the dirty-cow.sh

[@abhishekhiremath8955]

Nice

[@KodeKloud]

Thanks! Please subscribe to our channel and keep supporting😊

[@nguyenanhnguyen7658]

Nice... :)

[@prashanthjs915]

cue fargo theme

[@simonshkilevich3032]

😳

[@KodeKloud]

Thanks for watching our video. Cheers!

[@AbhijeetSachdev]

:D

[@debkr]

Awesome 👍

[@KodeKloud]

Thanks for your love and support!

[@nksajeer]

great content

[@KodeKloud]

Welcome! Please subscribe to our channel and help us create more such videos. Thanks 😊

[@aogunnaike]

Awesome 👍😎

[@KodeKloud]

Thanks! Please subscribe to the channel and help us do more such creative educational videos.

[@aogunnaike]

@@KodeKloud already a subscriber sir, cheers!