HTB SteamCloud Walkthrough

HTB SteamCloud Walkthrough

This Streamcloud HTB walkthrough demonstrates a realistic Kubernetes pentest from initial cluster discovery to full privilege escalation. You’ll learn practical techniques for enumerating namespaces, identifying exposed kubelets and serviceAccounts, exploiting weak RBAC and misconfigured resources, and how to remediate these issues from a developer and ops perspective. Ideal for pentesters learning K8s attack paths and for engineers wanting to harden clusters.

October 7, 2025 · 13 min · Bhavik Kanejiya
Kubernetes Security Basics: From a Pentester’s Point of View

Kubernetes Security Basics: From a Pentester’s Point of View

Explore Kubernetes security from a pentester’s point of view. Follow a hands-on walkthrough from reconnaissance to root access, focusing on network packet analysis, exploitation techniques, and cluster misconfigurations

May 29, 2025 · 10 min · Bhavik Kanejiya