Introduction

This guide walks you through a complete black-box penetration test of a Kubernetes cluster. We start with zero knowledge and work step-by-step until we achieve full cluster compromise. Every command has been tested and verified.

If you like this research, buy me a coffee (PayPal) — Keep the lab running

Table of Contents

1. Introduction
2. Pre-Testing Setup
3. Phase 0: Reconnaissance
4. Phase 1: Initial Access
5. Phase 2: Information Disclosure
6. Phase 3: Privilege Escalation
7. Phase 4: Cluster Access
8. Phase 5: Lateral Movement
9. Phase 6: Container Escape
10. Phase 7: Full Cluster Compromise
11. Complete Attack Chain Summary

What is Black-Box Testing?

Black-Box Testing means we have:

• No prior knowledge of the target