Repository navigation
Expand file tree
/
Copy pathbook.toml
More file actions
197 lines (182 loc) · 27.6 KB
/
Copy pathbook.toml
File metadata and controls
197 lines (182 loc) · 27.6 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
[book]
authors = ["HackTricks Team"]
language = "en"
src = "src"
title = "HackTricks Cloud"
[build]
create-missing = false
extra-watch-dirs = ["translations"]
[preprocessor.tabs]
[preprocessor.hacktricks]
command = "python3 ./hacktricks-preprocessor.py"
env = "prod"
[output.html]
additional-css = ["theme/tabs.css", "theme/pagetoc.css", "theme/discount.css"]
additional-js = [
"theme/tabs.js",
"theme/pagetoc.js",
"theme/ht_searcher.js",
"theme/sponsor.js",
"theme/discount.js",
"theme/motion.js",
"theme/ai.js",
"theme/permission_categories.js"
]
no-section-label = true
preferred-dark-theme = "hacktricks-dark"
default-theme = "hacktricks-light"
hash-files = false
[output.html.fold]
enable = true # whether or not to enable section folding
level = 0 # the depth to start folding
[output.html.print]
enable = false # whether or not to enable print
[output.html.redirect]
"/pentesting-cloud/kubernetes-security/pentesting-kubernetes-services/index.html" = "../kubernetes-unauthenticated-access/index.html"
"/pentesting-cloud/kubernetes-security/pentesting-kubernetes-services/kubelet-authentication-and-authorization.html" = "../kubernetes-unauthenticated-access/kubelet-authentication-and-authorization.html"
"/pentesting-cloud/kubernetes-security/kubernetes-validatingwebhookconfiguration.html" = "kubernetes-privilege-escalation/validating-admission-policies.html"
"/pentesting-cloud/kubernetes-security/kubernetes-api-object-operations.html" = "kubernetes-privilege-escalation/api-object-operations.html"
"/pentesting-cloud/kubernetes-security/kubernetes-external-secrets-operator.html" = "kubernetes-privilege-escalation/external-secrets-operator.html"
"/pentesting-cloud/kubernetes-security/kubernetes-helm-template-injection.html" = "kubernetes-privilege-escalation/helm-template-injection.html"
"/pentesting-cloud/kubernetes-security/kubernetes-kyverno/index.html" = "../kubernetes-privilege-escalation/kyverno/index.html"
"/pentesting-cloud/kubernetes-security/kubernetes-kyverno/kubernetes-kyverno-bypass.html" = "../kubernetes-privilege-escalation/kyverno/kubernetes-kyverno-bypass.html"
"/pentesting-cloud/kubernetes-security/kubernetes-opa-gatekeeper/index.html" = "../kubernetes-privilege-escalation/opa-gatekeeper/index.html"
"/pentesting-cloud/kubernetes-security/kubernetes-opa-gatekeeper/kubernetes-opa-gatekeeper-bypass.html" = "../kubernetes-privilege-escalation/opa-gatekeeper/kubernetes-opa-gatekeeper-bypass.html"
"/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/index.html" = "../kubernetes-privilege-escalation/index.html"
"/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/pod-escape-privileges.html" = "../kubernetes-privilege-escalation/workload-and-pod-access.html#privileged-pod-and-hostpid-escape"
"/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/kubernetes-roles-abuse-lab.html" = "../kubernetes-privilege-escalation/index.html"
"/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/index.html#listing-secrets" = "../kubernetes-privilege-escalation/secrets-and-configmaps.html#listing-secrets"
"/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/index.html#pod-create---steal-token" = "../kubernetes-privilege-escalation/workload-and-pod-access.html#pod-create---steal-token"
"/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/index.html#pod-create-steal-token" = "../kubernetes-privilege-escalation/workload-and-pod-access.html#pod-create---steal-token"
"/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/index.html#nodes-proxy" = "../kubernetes-privilege-escalation/node-permissions-and-status.html#nodes-proxy"
"/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/index.html#nodesproxy-get---kubelet-exec-via-websocket-verb-confusion" = "../kubernetes-privilege-escalation/node-permissions-and-status.html#nodesproxy-get---kubelet-exec-via-websocket-verb-confusion"
"/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/index.html#nodes-and-pods-status" = "../kubernetes-privilege-escalation/node-permissions-and-status.html#nodes-and-pods-status"
"/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/index.html#malicious-admission-controller" = "../kubernetes-privilege-escalation/controllers-and-admission.html#malicious-admission-controller"
"/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/index.html#aws-eks-aws-auth-configmaps" = "../kubernetes-privilege-escalation/secrets-and-configmaps.html#aws-eks-aws-auth-configmaps"
"/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/index.html#certificate-signing-requests" = "../kubernetes-privilege-escalation/rbac-and-identities.html#certificate-signing-requests"
"/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/index.html#impersonating-privileged-accounts" = "../kubernetes-privilege-escalation/rbac-and-identities.html#impersonating-privileged-accounts"
"/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/index.html#configmap-name-squatting-and-live-update" = "../kubernetes-privilege-escalation/secrets-and-configmaps.html#configmap-name-squatting-and-live-update"
"/pentesting-cloud/kubernetes-security/abusing-roles-clusterroles-in-kubernetes/index.html#bypassing-hostpath-readonly-protection" = "../kubernetes-privilege-escalation/storage-and-networking.html#bypassing-hostpath-readonly-protection"
"/pentesting-cloud/kubernetes-security/kubernetes-basics.html" = "kubernetes-basic-information/index.html"
"/pentesting-cloud/kubernetes-security/kubernetes-basics.html#architecture--basics" = "kubernetes-basic-information/index.html#architecture--basics"
"/pentesting-cloud/kubernetes-security/kubernetes-basics.html#what-does-kubernetes-do" = "kubernetes-basic-information/index.html#architecture--basics"
"/pentesting-cloud/kubernetes-security/kubernetes-basics.html#architecture" = "kubernetes-basic-information/index.html#architecture--basics"
"/pentesting-cloud/kubernetes-security/kubernetes-basics.html#pki-infrastructure---certificate-authority-ca" = "kubernetes-basic-information/control-plane-components.html#pki-and-component-identities"
"/pentesting-cloud/kubernetes-security/kubernetes-basics.html#basic-actions" = "kubernetes-basic-information/access-and-common-concepts.html#kubeconfig-contexts-and-kubectl"
"/pentesting-cloud/kubernetes-security/kubernetes-basics.html#minikube" = "kubernetes-basic-information/access-and-common-concepts.html#minikube-and-local-learning"
"/pentesting-cloud/kubernetes-security/kubernetes-basics.html#kubectl-basics" = "kubernetes-basic-information/access-and-common-concepts.html#kubeconfig-contexts-and-kubectl"
"/pentesting-cloud/kubernetes-security/kubernetes-basics.html#minikube-dashboard" = "kubernetes-basic-information/access-and-common-concepts.html#minikube-and-local-learning"
"/pentesting-cloud/kubernetes-security/kubernetes-basics.html#yaml-configuration-files-examples" = "kubernetes-basic-information/kubernetes-objects.html#additional-configuration-examples"
"/pentesting-cloud/kubernetes-security/kubernetes-basics.html#namespaces" = "kubernetes-basic-information/kubernetes-objects.html#namespaces-and-scope"
"/pentesting-cloud/kubernetes-security/kubernetes-basics.html#helm" = "kubernetes-basic-information/access-and-common-concepts.html#helm-kustomize-and-gitops"
"/pentesting-cloud/kubernetes-security/kubernetes-basics.html#helm-values-yaml-injection" = "kubernetes-privilege-escalation/helm-template-injection.html#helm-values-yaml-injection"
"/pentesting-cloud/kubernetes-security/kubernetes-basics.html#exploitation-ideas" = "kubernetes-privilege-escalation/helm-template-injection.html#exploitation-ideas"
"/pentesting-cloud/kubernetes-security/kubernetes-basics.html#helm-v3-vs-helm-v4" = "kubernetes-privilege-escalation/helm-template-injection.html#helm-v3-vs-helm-v4"
"/pentesting-cloud/kubernetes-security/kubernetes-basics.html#defensive-patterns" = "kubernetes-privilege-escalation/helm-template-injection.html#defensive-patterns"
"/pentesting-cloud/kubernetes-security/kubernetes-basics.html#kubernetes-secrets" = "kubernetes-basic-information/kubernetes-objects.html#configuration-and-secret-objects"
"/pentesting-cloud/kubernetes-security/kubernetes-basics.html#secrets-in-etcd" = "kubernetes-basic-information/control-plane-components.html#discover-secrets-in-etcd"
"/pentesting-cloud/kubernetes-security/kubernetes-basics.html#discover-secrets-in-etcd" = "kubernetes-basic-information/control-plane-components.html#discover-secrets-in-etcd"
"/pentesting-cloud/kubernetes-security/kubernetes-basics.html#references" = "kubernetes-basic-information/index.html#references"
"/pentesting-cloud/kubernetes-security/exposing-services-in-kubernetes.html" = "kubernetes-enumeration/networking-objects.html"
"/pentesting-cloud/kubernetes-security/exposing-services-in-kubernetes.html#exposing-services-in-kubernetes" = "kubernetes-enumeration/networking-objects.html"
"/pentesting-cloud/kubernetes-security/exposing-services-in-kubernetes.html#automatic-enumeration" = "kubernetes-enumeration/networking-objects.html#summary-enumerate-what-is-exposed-externally"
"/pentesting-cloud/kubernetes-security/exposing-services-in-kubernetes.html#clusterip" = "kubernetes-enumeration/networking-objects.html#clusterip"
"/pentesting-cloud/kubernetes-security/exposing-services-in-kubernetes.html#nodeport" = "kubernetes-enumeration/networking-objects.html#nodeport"
"/pentesting-cloud/kubernetes-security/exposing-services-in-kubernetes.html#loadbalancer" = "kubernetes-enumeration/networking-objects.html#loadbalancer"
"/pentesting-cloud/kubernetes-security/exposing-services-in-kubernetes.html#external-ips" = "kubernetes-enumeration/networking-objects.html#external-ips"
"/pentesting-cloud/kubernetes-security/exposing-services-in-kubernetes.html#externalname" = "kubernetes-enumeration/networking-objects.html#externalname"
"/pentesting-cloud/kubernetes-security/exposing-services-in-kubernetes.html#endpointslices" = "kubernetes-enumeration/networking-objects.html#endpointslices"
"/pentesting-cloud/kubernetes-security/exposing-services-in-kubernetes.html#ingress" = "kubernetes-enumeration/networking-objects.html#ingresses"
"/pentesting-cloud/kubernetes-security/exposing-services-in-kubernetes.html#gateway-api" = "kubernetes-enumeration/networking-objects.html#gateway-api"
"/pentesting-cloud/kubernetes-security/exposing-services-in-kubernetes.html#references" = "kubernetes-enumeration/networking-objects.html#references"
"/pentesting-cloud/kubernetes-security/kubernetes-role-based-access-control-rbac.html" = "kubernetes-basic-information/access-and-common-concepts.html#rbac-roles-subjects-and-bindings"
"/pentesting-cloud/kubernetes-security/kubernetes-role-based-access-control-rbac.html#kubernetes-role-based-access-controlrbac" = "kubernetes-basic-information/access-and-common-concepts.html#rbac-roles-subjects-and-bindings"
"/pentesting-cloud/kubernetes-security/kubernetes-role-based-access-control-rbac.html#role-based-access-control-rbac" = "kubernetes-basic-information/access-and-common-concepts.html#rbac-roles-subjects-and-bindings"
"/pentesting-cloud/kubernetes-security/kubernetes-role-based-access-control-rbac.html#templates" = "kubernetes-basic-information/access-and-common-concepts.html#rbac-rules-and-templates"
"/pentesting-cloud/kubernetes-security/kubernetes-role-based-access-control-rbac.html#rules-verbs" = "kubernetes-basic-information/access-and-common-concepts.html#request-verbs-and-specialized-permissions"
"/pentesting-cloud/kubernetes-security/kubernetes-role-based-access-control-rbac.html#examples" = "kubernetes-basic-information/access-and-common-concepts.html#rbac-rules-and-templates"
"/pentesting-cloud/kubernetes-security/kubernetes-role-based-access-control-rbac.html#rolebinding-and-clusterrolebinding" = "kubernetes-basic-information/access-and-common-concepts.html#rbac-roles-subjects-and-bindings"
"/pentesting-cloud/kubernetes-security/kubernetes-role-based-access-control-rbac.html#details-worth-checking" = "kubernetes-basic-information/access-and-common-concepts.html#named-resource-restrictions"
"/pentesting-cloud/kubernetes-security/kubernetes-role-based-access-control-rbac.html#enumerating-rbac" = "kubernetes-enumeration/rbac-objects.html"
"/pentesting-cloud/kubernetes-security/kubernetes-role-based-access-control-rbac.html#abuse-roleclusterroles-for-privilege-escalation" = "kubernetes-privilege-escalation/index.html"
"/pentesting-cloud/kubernetes-security/kubernetes-role-based-access-control-rbac.html#references" = "kubernetes-basic-information/access-and-common-concepts.html#references"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html" = "kubernetes-post-exploitation/attacking-kubernetes-from-inside-a-pod.html"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#attacking-kubernetes-from-inside-a-pod" = "kubernetes-post-exploitation/attacking-kubernetes-from-inside-a-pod.html#attacking-kubernetes-from-inside-a-pod"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#pod-breakout" = "kubernetes-post-exploitation/attacking-kubernetes-from-inside-a-pod.html#pod-breakout"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#escaping-from-the-pod" = "kubernetes-post-exploitation/attacking-kubernetes-from-inside-a-pod.html#escaping-from-the-pod"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#abusing-writable-hostpathbind-mounts-container---host-root-via-suid-planting" = "kubernetes-post-exploitation/attacking-kubernetes-from-inside-a-pod.html#abusing-writable-hostpathbind-mounts-container---host-root-via-suid-planting"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#abusing-kubernetes-privileges" = "kubernetes-post-exploitation/attacking-kubernetes-from-inside-a-pod.html#abusing-kubernetes-privileges"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#abusing-cloud-privileges" = "kubernetes-post-exploitation/attacking-kubernetes-from-inside-a-pod.html#abusing-cloud-privileges"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#search-vulnerable-network-services" = "kubernetes-post-exploitation/attacking-kubernetes-from-inside-a-pod.html#search-vulnerable-network-services"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#services" = "kubernetes-post-exploitation/attacking-kubernetes-from-inside-a-pod.html#services"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#scanning" = "kubernetes-post-exploitation/attacking-kubernetes-from-inside-a-pod.html#scanning"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#sniffing" = "kubernetes-post-exploitation/attacking-kubernetes-from-inside-a-pod.html#sniffing"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#network-spoofing" = "kubernetes-post-exploitation/attacking-kubernetes-from-inside-a-pod.html#network-spoofing"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#node-dos" = "kubernetes-post-exploitation/node-post-exploitation.html#node-dos"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#node-post-exploitation" = "kubernetes-post-exploitation/node-post-exploitation.html#node-post-exploitation"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#what-is-spire" = "spiffe-spire-workload-identity-spoofing.html#what-is-spire"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#how-it-works" = "spiffe-spire-workload-identity-spoofing.html#how-it-works"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#spiffespire-workload-identity-spoofing" = "kubernetes-post-exploitation/node-post-exploitation.html#spiffespire-workload-identity-spoofing"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#kubelet-credentials-and-local-api" = "kubernetes-post-exploitation/node-post-exploitation.html#kubelet-credentials-and-local-api"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#cri-runtime-containers-and-filesystems" = "kubernetes-post-exploitation/node-post-exploitation.html#cri-runtime-containers-and-filesystems"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#control-plane-node-artifacts" = "kubernetes-post-exploitation/node-post-exploitation.html#control-plane-node-artifacts"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#image-pull-and-registry-credentials" = "kubernetes-post-exploitation/node-post-exploitation.html#image-pull-and-registry-credentials"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#find-node-kubeconfig" = "kubernetes-post-exploitation/node-post-exploitation.html#find-node-kubeconfig"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#steal-secrets" = "kubernetes-post-exploitation/node-post-exploitation.html#steal-secrets"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#privileged-daemonsets" = "kubernetes-post-exploitation/node-post-exploitation.html#privileged-daemonsets"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#pivot-to-cloud" = "kubernetes-post-exploitation/node-post-exploitation.html#pivot-to-cloud"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#steal-etcd" = "kubernetes-post-exploitation/etcd-post-exploitation.html#locate-and-read-the-active-datastore"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#read-secrets-from-etcd-1" = "kubernetes-post-exploitation/etcd-post-exploitation.html#locate-and-read-the-active-datastore"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#read-secrets-from-etcd-2-from-here" = "kubernetes-post-exploitation/etcd-post-exploitation.html#locate-and-read-the-active-datastore"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#staticmirrored-pods-persistence" = "kubernetes-post-exploitation/node-post-exploitation.html#staticmirrored-pods-persistence"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#delete-pods--unschedulable-nodes" = "kubernetes-post-exploitation/node-post-exploitation.html#delete-pods--unschedulable-nodes"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#automatic-tools" = "kubernetes-post-exploitation/attacking-kubernetes-from-inside-a-pod.html#automatic-tools"
"/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html#references" = "kubernetes-post-exploitation/attacking-kubernetes-from-inside-a-pod.html#references"
"/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.html" = "kubernetes-post-exploitation/internal-network-attacks.html"
"/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.html#kubernetes-network-attacks" = "kubernetes-post-exploitation/internal-network-attacks.html#kubernetes-network-attacks"
"/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.html#introduction" = "kubernetes-post-exploitation/internal-network-attacks.html#introduction"
"/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.html#basic-kubernetes-networking" = "kubernetes-post-exploitation/internal-network-attacks.html#basic-kubernetes-networking"
"/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.html#arp" = "kubernetes-post-exploitation/internal-network-attacks.html#arp"
"/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.html#networkpolicy-and-admin-policy-layers" = "kubernetes-post-exploitation/internal-network-attacks.html#networkpolicy-and-admin-policy-layers"
"/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.html#kubernetes-traffic-object-writes" = "kubernetes-post-exploitation/internal-network-attacks.html#kubernetes-traffic-object-writes"
"/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.html#service-externalname-redirect" = "kubernetes-post-exploitation/internal-network-attacks.html#service-externalname-redirect"
"/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.html#pod-label-traffic-hijack" = "kubernetes-post-exploitation/internal-network-attacks.html#pod-label-traffic-hijack"
"/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.html#create-only-name-squatting" = "kubernetes-post-exploitation/internal-network-attacks.html#create-only-name-squatting"
"/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.html#ingress-creation-and-route-replacement" = "kubernetes-post-exploitation/internal-network-attacks.html#ingress-creation-and-route-replacement"
"/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.html#gateway-api-httproute-exposure-replacement-and-mirroring" = "kubernetes-post-exploitation/internal-network-attacks.html#gateway-api-httproute-exposure-replacement-and-mirroring"
"/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.html#status-based-traffic-interception" = "kubernetes-post-exploitation/internal-network-attacks.html#status-based-traffic-interception"
"/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.html#dns" = "kubernetes-post-exploitation/internal-network-attacks.html#dns"
"/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.html#arp-spoofing-in-pods-in-the-same-node" = "kubernetes-post-exploitation/internal-network-attacks.html#arp-spoofing-in-pods-in-the-same-node"
"/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.html#scapy" = "kubernetes-post-exploitation/internal-network-attacks.html#scapy"
"/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.html#arpspoof" = "kubernetes-post-exploitation/internal-network-attacks.html#arpspoof"
"/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.html#dns-spoofing" = "kubernetes-post-exploitation/internal-network-attacks.html#dns-spoofing"
"/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.html#dns-spoofing-via-coredns-configmap" = "kubernetes-post-exploitation/internal-network-attacks.html#dns-spoofing-via-coredns-configmap"
"/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.html#abusing-exposed-kubernetes-management-services" = "kubernetes-post-exploitation/internal-network-attacks.html#abusing-exposed-kubernetes-management-services"
"/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.html#enumerating-kubernetes-network-policies" = "kubernetes-post-exploitation/internal-network-attacks.html#enumerating-kubernetes-network-policies"
"/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.html#capturing-traffic" = "kubernetes-post-exploitation/internal-network-attacks.html#capturing-traffic"
"/pentesting-cloud/kubernetes-security/kubernetes-network-attacks.html#references" = "kubernetes-post-exploitation/internal-network-attacks.html#references"
"/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.html" = "kubernetes-post-exploitation/kubernetes-pivoting-to-clouds.html"
"/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.html#kubernetes-pivoting-to-clouds" = "kubernetes-post-exploitation/kubernetes-pivoting-to-clouds.html#kubernetes-pivoting-to-clouds"
"/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.html#gcp" = "kubernetes-post-exploitation/kubernetes-pivoting-to-clouds.html#gcp"
"/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.html#mounting-gcp-sa-keys-as-secret" = "kubernetes-post-exploitation/kubernetes-pivoting-to-clouds.html#mounting-gcp-sa-keys-as-secret"
"/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.html#relating-gsa-json-to-ksa-secret" = "kubernetes-post-exploitation/kubernetes-pivoting-to-clouds.html#relating-gsa-json-to-ksa-secret"
"/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.html#gke-workload-identity" = "kubernetes-post-exploitation/kubernetes-pivoting-to-clouds.html#gke-workload-identity"
"/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.html#aws" = "kubernetes-post-exploitation/kubernetes-pivoting-to-clouds.html#aws"
"/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.html#kiam--kube2iam-iam-role-for-pods" = "kubernetes-post-exploitation/kubernetes-pivoting-to-clouds.html#kiam--kube2iam-iam-role-for-pods"
"/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.html#create-pod-with-iam-role" = "kubernetes-post-exploitation/kubernetes-pivoting-to-clouds.html#create-pod-with-iam-role"
"/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.html#iam-role-for-k8s-service-accounts-via-oidc" = "kubernetes-post-exploitation/kubernetes-pivoting-to-clouds.html#iam-role-for-k8s-service-accounts-via-oidc"
"/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.html#eks-pod-identity" = "kubernetes-post-exploitation/kubernetes-pivoting-to-clouds.html#eks-pod-identity"
"/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.html#eks-governance-guardrails" = "kubernetes-post-exploitation/kubernetes-pivoting-to-clouds.html#eks-governance-guardrails"
"/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.html#find-pods-a-sas-with-iam-roles-in-the-cluster" = "kubernetes-post-exploitation/kubernetes-pivoting-to-clouds.html#find-pods-a-sas-with-iam-roles-in-the-cluster"
"/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.html#node-iam-role-to-cluster-admin" = "kubernetes-post-exploitation/kubernetes-pivoting-to-clouds.html#node-iam-role-to-cluster-admin"
"/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.html#steal-iam-role-token" = "kubernetes-post-exploitation/kubernetes-pivoting-to-clouds.html#steal-iam-role-token"
"/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.html#privesc-to-cluster-admin" = "kubernetes-post-exploitation/kubernetes-pivoting-to-clouds.html#privesc-to-cluster-admin"
"/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.html#azure--aks" = "kubernetes-post-exploitation/kubernetes-pivoting-to-clouds.html#azure--aks"
"/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.html#references" = "kubernetes-post-exploitation/kubernetes-pivoting-to-clouds.html#references"
"/pentesting-cloud/kubernetes-security/kubernetes-namespace-escalation.html" = "kubernetes-post-exploitation/kubernetes-namespace-escalation.html"
"/pentesting-cloud/kubernetes-security/kubernetes-namespace-escalation.html#kubernetes-namespace-escalation" = "kubernetes-post-exploitation/kubernetes-namespace-escalation.html#kubernetes-namespace-escalation"
"/pentesting-cloud/kubernetes-security/kubernetes-namespace-escalation.html#abuse-k8s-privileges" = "kubernetes-post-exploitation/kubernetes-namespace-escalation.html#abuse-k8s-privileges"
"/pentesting-cloud/kubernetes-security/kubernetes-namespace-escalation.html#escape-to-the-node" = "kubernetes-post-exploitation/kubernetes-namespace-escalation.html#escape-to-the-node"
"/pentesting-cloud/kubernetes-security/kubernetes-namespace-escalation.html#references" = "kubernetes-post-exploitation/kubernetes-namespace-escalation.html#references"
"/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.html#workflow-of-iam-role-for-service-accounts" = "kubernetes-post-exploitation/kubernetes-pivoting-to-clouds.html#workflow-of-iam-role-for-service-accounts"
"/pentesting-cloud/kubernetes-security/kubernetes-pivoting-to-clouds.html#workflow-of-iam-role-for-service-accounts-1" = "kubernetes-post-exploitation/kubernetes-pivoting-to-clouds.html#workflow-of-iam-role-for-service-accounts-1"