can-i gtfo?

Kubernetes RBAC Abuse Collection

View on GitHub

create pods

Verb: create

Resource: pods

Description: Create new pods

Abuses

Container Escape

Create a pod with privileged access (BadPod) and escape container boundaries.

Lateral Movement

Create a pod with privileged access on a specific node using 'nodeSelector' and escape container boundaries.

← Back to overview