Kubernetes

This page contains the Stratus attack techniques for Kubernetes, grouped by MITRE ATT&CK Tactic. Note that some Stratus attack techniques may correspond to more than a single ATT&CK Tactic.

Persistence

• Create Admin ClusterRole

• Create Client Certificate Credential

• Create Long-Lived Token

Privilege Escalation

• Create Admin ClusterRole

• Container breakout via hostPath volume mount

• Privilege escalation through node/proxy permissions

• Run a Privileged Pod

Credential Access

• Dump All Secrets

• Steal Pod Service Account Token