{"id":27226256,"url":"https://github.com/theunknownsoul/awesome-kubernetes-pentesting-guide","last_synced_at":"2026-05-19T02:02:41.646Z","repository":{"id":284756176,"uuid":"955965356","full_name":"TheUnknownSoul/awesome-kubernetes-pentesting-guide","owner":"TheUnknownSoul","description":"My own kubernetes penetration testing favorite methodologies, script, tools and resources. ","archived":false,"fork":false,"pushed_at":"2025-04-09T08:08:57.000Z","size":262,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-07-01T19:07:37.811Z","etag":null,"topics":["devsecops","kubernetes","security","trivy-scan"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/TheUnknownSoul.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2025-03-27T13:37:38.000Z","updated_at":"2025-05-01T21:12:41.000Z","dependencies_parsed_at":"2025-03-27T14:44:58.041Z","dependency_job_id":"e3fbf98a-b272-4062-8c8f-cdeac59798ab","html_url":"https://github.com/TheUnknownSoul/awesome-kubernetes-pentesting-guide","commit_stats":null,"previous_names":["theunknownsoul/awesome-kubernetes-pentesting-guide"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/TheUnknownSoul/awesome-kubernetes-pentesting-guide","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheUnknownSoul%2Fawesome-kubernetes-pentesting-guide","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheUnknownSoul%2Fawesome-kubernetes-pentesting-guide/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheUnknownSoul%2Fawesome-kubernetes-pentesting-guide/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheUnknownSoul%2Fawesome-kubernetes-pentesting-guide/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/TheUnknownSoul","download_url":"https://codeload.github.com/TheUnknownSoul/awesome-kubernetes-pentesting-guide/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheUnknownSoul%2Fawesome-kubernetes-pentesting-guide/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":266057203,"owners_count":23870124,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["devsecops","kubernetes","security","trivy-scan"],"created_at":"2025-04-10T11:58:09.441Z","updated_at":"2026-05-19T02:02:41.588Z","avatar_url":"https://github.com/TheUnknownSoul.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003cimg src=\"images/kubernetes.png\" alt=\"Kubernetes logo\"\u003e    \n\n\n# Awesome Kubernetes Pentesting and DevSecOps hardening guide :skull: :pirate_flag: :lock:\n\n\nMy own kubernetes penetration testing methodology, some scripts, tools and favourite resources.\n\n## Content\n- [Information Gathering](https://github.com/TheUnknownSoul/awesome-kubernetes-pentesting-guide#information-gathering)\n- [Authentication and Authorization](https://github.com/TheUnknownSoul/awesome-kubernetes-pentesting-guide#)\n- [Pod Security Testing](https://github.com/TheUnknownSoul/awesome-kubernetes-pentesting-guide#)\n- [API Security Testing](https://github.com/TheUnknownSoul/awesome-kubernetes-pentesting-guide#)\n- [Misconfiguration Checks](https://github.com/TheUnknownSoul/awesome-kubernetes-pentesting-guide#)\n- [Audit Logging](https://github.com/TheUnknownSoul/awesome-kubernetes-pentesting-guide#)\n- [Tools and useful scripts](https://github.com/TheUnknownSoul/awesome-kubernetes-pentesting-guide#)\n- [Containers and images security](https://github.com/TheUnknownSoul/awesome-kubernetes-pentesting-guide#)\n\n## Information Gathering\n* Identify the target cluster\n* Enumerate components, version, entry points\n* Find information about network architecture \n\n### Network Reconnaissance \n\nBasic scenario to detect all hosts, versions, OS and probe script engine. Without ping option.\n```\nsudo nmap \u003cip_range\u003e -A -p- -T5 -oA -Pn\n```\nAdditionally, to check network security you may use options below:\n\n| nmap flag | Description                                                                    |\n|-----------|--------------------------------------------------------------------------------|\n| -T0-5     | Speed of scanning (optionally)                                                 |\n| -sS       | TCP SYNC scan                                                                  |\n| -f        | Fragmented packets (to detect  anomalies in network behaviour)                 |\n| -sA       | TCP ACK scan                                                                   |\n| -sM       | Maimon scan. Detects anomalies sending NULL, FIN and Xmas scan but without RST |\n| -oA       | Output in all formats. Will be useful at the report stage (optionally)         |\n\n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftheunknownsoul%2Fawesome-kubernetes-pentesting-guide","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftheunknownsoul%2Fawesome-kubernetes-pentesting-guide","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftheunknownsoul%2Fawesome-kubernetes-pentesting-guide/lists"}