When Kubernetes Credentials Fall into the Wrong Hands
One leaked credential. One Kubernetes cluster. How far can an attacker go?
In 30 minutes, see how attackers think about exposed credentials and which security assumptions your team should stop trusting.
Who this session is for:
Cloud Security Engineers who want to see Kubernetes risk through the eyes of an attacker
DevOps and DevSecOps Engineers who handle credentials, workloads and clusters every day
Security professionals who want a clear picture of what matters in Kubernetes security, and what does not
Requirements: no setup needed. Familiarity with Linux, Docker and containers will help you get the most from the session.
What you will learn:
How attackers approach exposed credentials
Why Kubernetes identities are such attractive targets
How seemingly isolated weaknesses connect into a much larger compromise
Why securing Kubernetes means looking beyond the cluster itself
What makes this session different:
It is presented by the project lead of OWASP EKS Goat and OWASP GKE Goat, who researches real Kubernetes exploitation paths
It cuts through the noise to show which Kubernetes security assumptions hold up and which do not
The 5-hour Online Workshop
This lightning class is the preview of a 5-hour, hands-on workshop where you follow the full attack journey yourself.
Workshop: Breach a Kubernetes Cluster with One Leaked Secret on Tuesday, December 8th.
Identify exposed secrets and use them to access a Kubernetes cluster
Explore RBAC and namespace isolation from an attacker perspective
Move from application credentials to container registries
Pull and analyze container images for security issues
Instructor:
Anjali Shukla, Senior Security Engineer
Anjali is a seasoned cloud security engineer, with 10+ year experience in Cloud Security (AWS/Azure/GCP), DevSecOps and Kubernetes security (EKS/GKE) with a recent focus on AI Security. She is the founder of Container Security Village, community dedicated to enhancing cloud-native security. As the project lead for OWASP EKS Goat and OWASP GKE Goat, she focuses on AWS EKS & GKE security research and hands-on exploitation paths. Anjali is a recognized AWS Community Builder and actively shares her research through her Youtube channel, @peachycloudsecurity, and Instagram @peachycloudsecurity.
Her extensive speaking history includes Blackhat USA, Black Hat Spring, Black Hat Europe, Nullcon, Seasides Goa, BSides Bangalore, CSA Bangalore, and C0c0n. She has also contributed to the community by volunteering at Cloud Village at DEFCON and various BSides events globally. Reach out at peachycloudsecurity[dot]com