can-i gtfo?

Kubernetes RBAC Abuse Collection

View on GitHub

list secrets

Abuses

Information Disclosure

List cannot only return the name of a resource but also its full details.

# List secrets across all namespaces
kubectl get secrets --all-namespaces -o json