Add content from: AnsibleHound – BloodHound Collector for Ansible WorX and Tow...

This commit is contained in:
HackTricks News Bot
2025-08-01 01:52:00 +00:00
parent 97759b6cec
commit ed2ae1e58f
47 changed files with 178 additions and 36 deletions
@@ -1,8 +1,10 @@
# Kubernetes Basics
{{#include ../../banners/hacktricks-training.md}}
## Kubernetes Basics
{{#include ../../banners/hacktricks-training.md}}
**The original author of this page is** [**Jorge**](https://www.linkedin.com/in/jorge-belmonte-a924b616b/) **(read his original post** [**here**](https://sickrov.github.io)**)**
@@ -569,4 +571,3 @@ https://www.youtube.com/watch?v=X48VuDVv0do
{{#include ../../banners/hacktricks-training.md}}
@@ -1,5 +1,7 @@
# External Secret Operator
{{#include ../../banners/hacktricks-training.md}}
**The original author of this page is** [**Fares**](https://www.linkedin.com/in/fares-siala/)
This page gives some pointers onto how you can achieve to steal secrets from a misconfigured ESO or application which uses ESO to sync its secrets.
@@ -119,3 +121,4 @@ https://github.com/external-secrets/external-secrets
{{#include ../../banners/hacktricks-training.md}}
@@ -1,5 +1,7 @@
# Kubernetes Kyverno
{{#include ../../../banners/hacktricks-training.md}}
**The original author of this page is** [**Guillaume**](https://www.linkedin.com/in/guillaume-chapela-ab4b9a196)
## Definition
@@ -57,3 +59,4 @@ When a pod is created in the `default` namespace without the label `app: myapp`,
{{#include ../../../banners/hacktricks-training.md}}
@@ -1,5 +1,7 @@
# Kubernetes Kyverno bypass
{{#include ../../../banners/hacktricks-training.md}}
**The original author of this page is** [**Guillaume**](https://www.linkedin.com/in/guillaume-chapela-ab4b9a196)
@@ -64,3 +66,4 @@ Another way to bypass policies is to focus on the ValidatingWebhookConfiguration
For more info check [https://madhuakula.com/kubernetes-goat/docs/scenarios/scenario-22/securing-kubernetes-clusters-using-kyverno-policy-engine/welcome/](https://madhuakula.com/kubernetes-goat/docs/scenarios/scenario-22/securing-kubernetes-clusters-using-kyverno-policy-engine/welcome/)
{{#include ../../../banners/hacktricks-training.md}}
@@ -1,5 +1,7 @@
# Kubernetes - OPA Gatekeeper
{{#include ../../../banners/hacktricks-training.md}}
**The original author of this page is** [**Guillaume**](https://www.linkedin.com/in/guillaume-chapela-ab4b9a196)
## Definition
@@ -77,3 +79,4 @@ When Gatekeeper is deployed in the Kubernetes cluster, it will enforce this poli
{{#include ../../../banners/hacktricks-training.md}}
@@ -1,5 +1,7 @@
# Kubernetes OPA Gatekeeper bypass
{{#include ../../../banners/hacktricks-training.md}}
**The original author of this page is** [**Guillaume**](https://www.linkedin.com/in/guillaume-chapela-ab4b9a196)
## Abusing misconfiguration
@@ -64,3 +66,4 @@ Another way to bypass constraints is to focus on the ValidatingWebhookConfigurat
{{#include ../../../banners/hacktricks-training.md}}
@@ -1,5 +1,7 @@
# Kubernetes ValidatingWebhookConfiguration
{{#include ../../banners/hacktricks-training.md}}
**The original author of this page is** [**Guillaume**](https://www.linkedin.com/in/guillaume-chapela-ab4b9a196)
## Definition
@@ -103,3 +105,4 @@ abusing-roles-clusterroles-in-kubernetes/
{{#include ../../banners/hacktricks-training.md}}