kubernetes-pentesting
kubernetes pentesting
What it does
- container-escape-techniques for escaping from a compromised pod to the underlying node
- linux-privilege-escalation once on a node for escalating to root
- linux-lateral-movement for pivoting between nodes
- linux-security-bypass when Pod Security Standards or seccomp profiles restrict your actions
- ssrf-server-side-request-forgery when exploiting SSRF to reach the K8s API or cloud metadata
Requirements & configuration
- 1.2 Token-Based Authentication (from inside pod)
- TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
- curl -s --cacert $CACERT -H "Authorization: Bearer $TOKEN" \
- | serviceaccounts/token (create) | Critical | Generate token for any SA |
- 3. SERVICE ACCOUNT TOKEN ABUSE
Configuration: CACERTTOKENAPISERVERNAMESPACEIMDS_TOKEN
Derived from the skill's own SKILL.md documentation · extracted 2026-07-23
kubernetes-pentesting FAQ
What does the kubernetes-pentesting skill do?
>- Kubernetes penetration testing playbook. Use when targeting Kubernetes clusters via API server, RBAC enumeration, service account abuse, etcd access, Kubelet API, pod escape, cloud-specific metadata, admission webhook bypass, and registry secrets. container-escape-techniques for escaping from a compromised pod to the underlying node linux-privilege-escalation once on a node for escalating to root
What does kubernetes-pentesting require?
1.2 Token-Based Authentication (from inside pod) TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token) curl -s --cacert $CACERT -H "Authorization: Bearer $TOKEN" \ | serviceaccounts/token (create) | Critical | Generate token for any SA | 3. SERVICE ACCOUNT TOKEN ABUSE Configuration keys: CACERT, TOKEN, APISERVER, NAMESPACE, IMDS_TOKEN.
How do I install kubernetes-pentesting?
Run: npx -y skills add https://github.com/yaklang/hack-skills --skill kubernetes-pentesting --agent claude-code — the source lives at github.com/yaklang/hack-skills.
Maintain kubernetes-pentesting?
Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.
[kubernetes-pentesting on getagentictools](https://getagentictools.com/skills/yaklang-hack-skills-kubernetes-pentesting?ref=badge) npx agentictools info skills/yaklang-hack-skills-kubernetes-pentesting The second line is the CLI lookup for this page — handy in READMEs and docs.
