Pentesting Multi-tenant Kubernetes Clusters

Enterprise Kubernetes deployments require more than your average pentest.

Kubernetes often creates an over-looked ecosystem of network and application infrastructure. As enterprise teams deploy more complex workloads into these environment, pentesting the presumed security boundaries can be a tedious and time consuming task.

In this talk Nick Coblentz walks through important test cases for Kubernetes, and showcases time-saving features of virtuekube that can help pentesters assess large clusters.

Understanding Kubernetes benefits
Complexity created by cluster sprawl
Role-based access controls
Self-service multi-tenant features
Pod isolation and blast radius
Enumerate network services and accessible pods
Discovering secrets and sensitive data

About The
Speaker

Nick Coblentz

Senior Lead Penetration Tester

As a senior penetration tester at Virtue, Nick focuses on
application security and cloud penetration testing.