can-i gtfo?

Kubernetes RBAC Abuse Collection

View on GitHub

update mutatingwebhookconfigurations

Abuses

Privilege Escalation

Update mutating webhooks to automatically escalate privileges of created resources

# Update webhook to add privileged security context to all pods

# Update webhook to add cluster-admin role to all service accounts