​🛠️ Online 1-Day Workshop: Breach a Kubernetes Cluster with One Leaked Secret

​Follow a single exposed secret all the way to a compromised Kubernetes cluster, hands-on.

​Credentials hold cloud-native environments together, and when they leak, attackers can move far beyond their intended boundaries.

​In 5 hours of guided labs, you will walk the full attack path yourself and leave knowing exactly where your clusters are exposed.

​Who this workshop is for:

• ​Cloud Security Engineers who need to understand how Kubernetes environments are really attacked

• ​DevOps and DevSecOps Engineers who build and run clusters, workloads and registries

• ​Security professionals who want practical, hands-on Kubernetes security skills

• ​Requirements: comfort with the Linux command line, plus a working knowledge of Docker and containers

​What you will learn:

• ​Identify exposed secrets and credentials

• ​Use discovered credentials to gain access to a Kubernetes cluster

• ​Understand Kubernetes fundamentals and RBAC

• ​Explore RBAC and namespace isolation from an attacker perspective

• ​Trace how application credentials lead to container registries

• ​Pull and analyze container images for security issues

​What is included:

• ​A 5-hour live, instructor-led, hands-on session with practical guided labs

• ​Full recording, sent to everyone who registers

• ​A spot in a focused cohort of 40 practitioners

• ​A Certificate of Participation with CPE credits

​What makes this workshop different:

• ​It follows one continuous attack journey, so you see how credentials, access controls, workloads and registries connect, not isolated tricks

• ​It is taught by the project lead of OWASP EKS Goat and OWASP GKE Goat, who builds hands-on Kubernetes exploitation paths for the community

​Instructor:
Anjali Shukla, Senior Security Engineer

​Anjali is a seasoned cloud security engineer, with 10+ year experience in Cloud Security (AWS/Azure/GCP), DevSecOps and Kubernetes security (EKS/GKE) with a recent focus on AI Security. She is the founder of Container Security Village, community dedicated to enhancing cloud-native security. As the project lead for OWASP EKS Goat and OWASP GKE Goat, she focuses on AWS EKS & GKE security research and hands-on exploitation paths. Anjali is a recognized AWS Community Builder and actively shares her research through her Youtube channel, @peachycloudsecurity, and Instagram @peachycloudsecurity.

​Her extensive speaking history includes Blackhat USA, Black Hat Spring, Black Hat Europe, Nullcon, Seasides Goa, BSides Bangalore, CSA Bangalore, and C0c0n. She has also contributed to the community by volunteering at Cloud Village at DEFCON and various BSides events globally. Reach out at peachycloudsecurity[dot]com