search

raesene / kube_security_lab

230 stars 41 forks source link

Additional Scenario - SSRF #1

Closed raesene closed 5 years ago

raesene commented 5 years ago

Look at creating an application scenario with an SSRF issue allowing access to one or more of the k8s APIs

raesene commented 5 years ago

We've got this now. https://github.com/raesene/kube_security_lab/blob/master/ssrf-to-insecure-port.yml

This works moderately well as we can expose the insecure port on localhost only, and expose the web application more widely, then use a secret grabbed from the insecure port against the main API server.