Post-Exploiting a Compromised ETCD - Luis Toro Puig, NCC Group
Channel: CNCF [Cloud Native Computing Foundation]
Date: 17/10/2023

后利用被入侵的ETCD | Post-Exploiting a Compromised ETCD - Luis Toro Puig, NCC Group

在一个ETCD（容器或主机）被入侵的情况下，你能做到多远？了解k8s如何向ETCD注入数据可能有助于我们篡改数据，注入恶意Pod，获得集群中的持久性，甚至绕过调度逻辑和AdmissionController的限制。

Giving an scenario on which an ETCD (container or host) was compromised, how far you will get? Understanding how k8s inject data in ETCD may help us to tamper data, inject malicious pods, gain persistence in the cluster or even bypass the scheduler logic and the AdmissionController restrictions.