Learn to Hack AWS & Kubernetes Clusters (for free)
Source: YouTube · John Hammond · published Dec 13, 2023 · 15:08
The EKS Cluster Games is a free online training platform that teaches cloud security through hands-on challenges based on real AWS EKS misconfigurations and security issues 0:18.
Key Takeaways:
• The first "Secret Seeker" challenge demonstrates how attackers can list and access Kubernetes secrets, then base64 decode them to extract sensitive information 1:04
• The "Registry Hunt" challenge shows how to extract Docker registry credentials from pods, authenticate to private container registries using crane, and download container images to find hidden flags 6:00
• These techniques are based on real-world security issues found in major cloud providers like Alibaba Cloud and IBM Cloud 13:38
This practical training approach helps security professionals understand attacker tradecraft and better protect their cloud environments 5:51.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
how do you secure a cloud environment say AWS Amazon web services and kubernetes eks that service they offer well you should know the offense understand the threat actors adversaries and hackers and what they're up to so you know what you're up against with that in mind I want to introduce you to the eks cluster games a challenge based activity and exercise for you to learn some of the techniques some of the tradecraft that adversaries might use to break into Cloud environments say you've hacked into a low privilege AWS eks pod you can use the terminal to find Flags or strings keys and tokens across the environment each challenge runs in a different kubernetes names space with varying permissions all the different kubernetes resources are crucial and challenges are based on real misconfigu…