Rishabh Nigam

Security Consultant |Ex-Security Engineer | WebSec| CloudSec|
Container Sec| CKA | SCS-C01 | SAA-C02 | AZ-900| CEH

[Graham Helton (too much for zblock) @GrahamHelton3]

Excited to disclose my research allowing RCE in Kubernetes

It allows running arbitrary commands in EVERY pod in a cluster using a commonly granted "read only" RBAC permission. This is not logged and and allows for trivial Pod breakout.

Unfortunately, this will NOT be patched.

[Rishabh Nigam @Cyb3rlant3rn]

@iximiuz Nice work! @iximiuz

[Rishabh Nigam @Cyb3rlant3rn]

@historyinmemes Kamado Tanjiro

[Rishabh Nigam @Cyb3rlant3rn]

Just finished the #EKSClusterGames by @Wiz_io! 🚀 An amazing journey through Amazon EKS configurations! Ready to test your skills? Join the challenge here: https://t.co/cb2DjT5dRk

https://t.co/T23vfGEUAN

[Rishabh Nigam @Cyb3rlant3rn]

@AseemShrey Pretty cool!

[Rishabh Nigam @Cyb3rlant3rn]

Great! insights into exploitation of sidecar container @hashishrajan https://t.co/lOytYyI1DK

[Kubesploit @kubesploit]

Constellation is a Kubernetes engine that wraps your cluster into a single confidential context that is shielded from the underlying cloud infrastructure

Everything inside is always encrypted, including at runtime in memory

➤ https://t.co/kHaYYN9Yl8

[Kubesploit @kubesploit]

In this article, learn how ReadOnlyRootFilesystem enhances container security by enforcing immutability, thwarting attacks, and ensuring consistent deployments

➜ https://t.co/HzJMilep8o

[Rishabh Nigam @Cyb3rlant3rn]

@iximiuz Very nice! and elegant way to demonstrate docker networking concepts

[Kubetools @kubetools]

Get access to 200+ Kubernetes Labs & Tutorials via https://t.co/Il9BSgOL2A

[Kubesploit @kubesploit]

This article describes the challenges and solutions to connecting kubectl from your local computer to a private GKE cluster while impersonating a service account

➤ https://t.co/2bcLH58c0A

[ANI @ANI]

#WATCH | Prime Minister Narendra Modi met Team India in their dressing room after the ICC World Cup Finals at Narendra Modi Stadium in Ahmedabad, Gujarat on 19th November.

The PM spoke to the players and encouraged them for their performance throughout the tournament.

(Video: PMO)

[DevOps Weekly @DevopsDiscu]

Key Takeaways from the 2023 Kubernetes Security Report

https://t.co/2kbMJKZtQ0

Discussions: https://t.co/dHAXMuMIAB

#devops #kubernetes

[Christophe Tafani-Dereeper @christophetd]

Datadog's security team has just released KubeHound, an open-source attack mapping tool for Kubernetes clusters

https://t.co/1NaHHIfznN

https://t.co/rwWQFHY4kT

Comes with 25 attack types, each one comes with step by step instructions of how to exploit it

[Rishabh Nigam @Cyb3rlant3rn]

Quite interesting article explaining different attack scenarios on EKS by @datadoghq https://t.co/fWyCVMUkmp

[Rishabh Nigam @Cyb3rlant3rn]

@_niteshsurana Interesting!

[Rishabh Nigam @Cyb3rlant3rn]

I just earned my badge for passing Certified Kubernetes Administrator Exam
https://t.co/NQy7LhVHPS

[Rishabh Nigam @Cyb3rlant3rn]

@_niteshsurana

[Rishabh Nigam @Cyb3rlant3rn]

@_niteshsurana

[Rishabh Nigam @Cyb3rlant3rn]

Putting together some information in my blog as a starting point for Kubernetes security. Focus is around basics of cluster and its setup in local environment. https://t.co/ABlodWTClV