{"repo":"madhuakula/kubernetes-goat","free":true,"listed":false,"github":"https://github.com/madhuakula/kubernetes-goat","clone":"git clone https://github.com/madhuakula/kubernetes-goat.git","description":"Kubernetes Goat is a \"Vulnerable by Design\" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀","language":"HTML","stars":5747,"topics":["kubernetes","vulnerable-app","security","hacking","pentesting","infrastructure","cloud-security","docker","container","kubernetes-goat"],"license":"MIT","category":"deployment-docker-iac","readme_excerpt":"Kubernetes Goat ✨ The Kubernetes Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security 🚀 🙌 Refer to https://madhuakula.com/kubernetes-goat for the guide 📖 🧰 Setting up Kubernetes Goat Ensure you have admin access to the Kubernetes cluster and installed kubectl . Refer to the docs for installation Ensure you have the helm package manager installed. Refer to the docs for installation To set up the Kubernetes Goat resources in your cluster, run the following commands: Ensure the pods are running before running the access script Access Kubernetes Goat by exposing the resources to the local system (port-forward) by the following command: Then navigate to http://127.0.0.1:1234 Refer to https://madhuakula.com/kubernetes-goat/docs/how-to-run for setting up Kubernetes Goat in various environments like GKE, EKS, AKS, K3S, KIND, etc. 🏆 Scenarios 1. Sensitive keys in codebases 2. DIND (docker-in-docker) exploitation 3. SSRF in the Kubernetes (K8S) world 4. Container escape to the host system 5. Docker CIS benchmarks analysis 6. Kubernetes CIS benchmarks analysis 7. Attacking private registry 8. NodePort exposed services 9. Helm v2 tiller to PwN the cluster - [Deprecated] 10. Analyzing crypto miner container 11. Kubernetes namespaces bypass 12. Gaining environment information 13. DoS the Memory/CPU resources 14. Hacker container preview 15. Hidden in layers 16. RBAC least privileges misconfiguration 17. KubeAudit - Audit Kube","default_branch":null,"files":null,"tree":[],"storefront":"/r/madhuakula","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/madhuakula/kubernetes-goat/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}