auditing-kubernetes-rbac-privilege-escalation

Finds over-permissive RBAC roles and service-account token abuse paths in a Kubernetes cluster using kubectl auth can-i, rbac-police, kubectl-who-can, and rakkess, tracing which subjects can escalate toward cluster-admin. Use when reviewing who can escalate privileges in a cluster, hunting exploitable RoleBindings during an authorized review, or validating least privilege after an RBAC change. Keywords: RBAC, ClusterRoleBinding, service account token, auth can-i, rbac-police, escalate, bind, imp

Install

KitScout test notes

Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.

Similar tools

• docker-expert 49,642 ★
  You are an advanced Docker containerization expert with comprehensive, practical knowledge of container optimi
• kubernetes-architect 49,642 ★
  Expert Kubernetes architect specializing in cloud-native infrastructure, advanced GitOps workflows (ArgoCD/Flu
• gitops-workflow 42,470 ★
  Implement GitOps workflows with ArgoCD and Flux for automated, declarative Kubernetes deployments with continu
• helm-chart-scaffolding 42,470 ★
  Design, organize, and manage Helm charts for templating and packaging Kubernetes applications with reusable co
• istio-traffic-management 42,470 ★
  Configure Istio traffic management including routing, load balancing, circuit breakers, and canary deployments