1
icon.com/Privilege_escalation/hostPath_mount.html">hostPath mount;
➡Access cloud resources.
• Defense evasion:
➡Clear container logs;
➡Delete events;
➡Pod name similarity;
➡Connect from proxy server.
• Credential access:
➡List K8S secrets;
➡Access node information;
➡Container service account;
➡Application credentials in configuration files;
➡Access managed identity credentials;
➡Malicious admission controller.
• Discovery:
➡Access Kubernetes API server;
➡Access Kubelet API;
➡Network mapping;
➡Exposed sensitive interfaces;
➡Instance Metadata API.
• Lateral movement:
➡Access cloud resources;
➡Container service account;
➡Cluster internal networking;