6.4 Hands-On: RBAC Misconfiguration & Host | Overprivileged CSI Drivers & Root Pod Deployment

Step into a practical lab session demonstrating end-to-end cluster orchestration exploitation. We walk through identifying permissive cluster bindings, creating breakout workloads, and executing host filesystem traversal to capture host-level credentials. Key Takeaways & Architecture Concepts: • Live demonstration of auditing vulnerable RBAC bindings using native kubectl and inspection tooling. • Launching an unconstrained pod to gain read/write access over node root partitions. • Extracting sensitive kubelet configuration and node bootstrap credentials from disk. • Implementing automated policy enforcement with Kyverno and OPA Gatekeeper. Links & Resources: 🚀 Create your own personalized AI courses: Download Adsorp at https://www.adsorp.ai Adsorp creates personalized AI books that bridge the gap in your technical knowledge and accelerate real-world understanding.