Kubernetes RCE: Exploiting nodes/proxy GET
Exploit a Kubernetes RBAC authorization bypass where nodes/proxy GET permissions allow command execution in any Pod.
Explore the Catalog
Tutorials, challenges, courses, skill paths, playgrounds, and more — search the whole library in one place.
Challenge on Kubernetes
Grant Read-Only Access to a Developer Using RBAC Role and RoleBinding
by Omkar Shelke
A developer named siddhi requires read-only access to specific resources in the production namespace. Create a Role and RoleBinding to grant the minimum required permissions without any write access.
Challenge on Kubernetes
Debug and Resolve RBAC Failures for Two Deployments
by Omkar Shelke
Two monitoring applications are failing due to missing RBAC permissions. Fix both by creating ServiceAccounts, Roles, and RoleBindings.
Challenge on Kubernetes
Grant a ServiceAccount Access to a Specific Secret Using RBAC
by Omkar Shelke
Create a ServiceAccount with permissions to access only that specific Secret using RBAC resourceNames restriction.
Challenge on Kubernetes
Troubleshoot RBAC Permissions for a Failing Deployment
by Omkar Shelke
A Deployment is failing because its ServiceAccount lacks permissions to list pods. Fix the issue by binding an existing Role to the ServiceAccount.