pushsecurity / saas-attacks

Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown

Home Page:https://pushsecurity.com/blog/saas-attack-techniques/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Potential new technique - kubernetes resource injection

Esonhugh opened this issue · comments

Refer: https://github.com/Esonhugh/KubernetesCRInjection.

Here is my documents. I think this is a Potential attack surface in SaaS system which based on kubernetes.
After I discussed with some Cloud security Researchers about such attack,I summarized such attack technique and wrote such document.