๐Ÿ” Penetration Testing & Security Benchmarking a Kubernetes Cluster | Demo

iQuant ยท Intermediate ยทโ˜๏ธ DevOps & Cloud ยท1y ago

About this lesson

Support Us: https://buymeacoffee.com/iquantconsult GitHub Repo: https://github.com/iQuantC/Kubernetes_PenTest_Scan ๐ŸŽฅ Description: In this video, we walk you through an end-to-end Kubernetes security testing project using two powerful tools: kube-hunter for penetration testing and kube-bench for CIS compliance auditing โ€” all done locally using Minikube on Ubuntu 24.04! ๐Ÿ’ก What Youโ€™ll Learn: 1. How to install and run a local Kubernetes cluster using Minikube 2. How to scan your cluster for vulnerabilities using kube-hunter 3. How to run CIS Kubernetes security benchmarks using kube-bench 4. How to interpret and export security findings (JSON reports) 5. Real-world security tips and DevSecOps best practices 6. How to troubleshoot Docker/Minikube and container security issues ๐Ÿ› ๏ธ Tools & Technologies Used 1. Ubuntu 24.04 LTS 2. Docker 3. Minikube (Docker driver) 4. Aqua Security's kube-hunter 5. Aqua Security's kube-bench 6. kubectl & YAML manifests 7. CIS Benchmark (v1.23) 8. Python3 ๐Ÿ“Œ Watch This If: 1. You're a beginner or intermediate DevSecOps engineer 2. You want hands-on practice with Kubernetes security tools 3. You're preparing for CKS (Certified Kubernetes Security Specialist) 4. You want to build security into your CI/CD pipeline ๐Ÿ“บ Timestamps 00:00 - Intro & Objectives 00:39 - Setup Environment 02:45 - Minikube Cluster Setup 04:00 - Running kube-hunter (remote scan) 08:40 - Simulate Vulnerabilities in k8s Cluster 17:28 - Vulnerability Verification 21:43 - Retrieve Vulnerability Scan Results with kube-hunter pod 26:25 - Remediation Tips 32:01 - CIS Benchmarking with kube-bench 35:40 - Retrieve & Analyze kube-bench logs with jq ๐Ÿ”” Subscribe for More! ๐ŸŽฏ If you found this project helpful, donโ€™t forget to like, comment, and subscribe to the channel for more DevSecOps, DevOps, Kubernetes, and AI-powered project tutorials every week! #Kubernetes #DevSecOps #kubehunter #kubebench #Minikube #PenetrationTesting #CISBenchmark #KubernetesSecurity #i

Original Description

Support Us: https://buymeacoffee.com/iquantconsult GitHub Repo: https://github.com/iQuantC/Kubernetes_PenTest_Scan ๐ŸŽฅ Description: In this video, we walk you through an end-to-end Kubernetes security testing project using two powerful tools: kube-hunter for penetration testing and kube-bench for CIS compliance auditing โ€” all done locally using Minikube on Ubuntu 24.04! ๐Ÿ’ก What Youโ€™ll Learn: 1. How to install and run a local Kubernetes cluster using Minikube 2. How to scan your cluster for vulnerabilities using kube-hunter 3. How to run CIS Kubernetes security benchmarks using kube-bench 4. How to interpret and export security findings (JSON reports) 5. Real-world security tips and DevSecOps best practices 6. How to troubleshoot Docker/Minikube and container security issues ๐Ÿ› ๏ธ Tools & Technologies Used 1. Ubuntu 24.04 LTS 2. Docker 3. Minikube (Docker driver) 4. Aqua Security's kube-hunter 5. Aqua Security's kube-bench 6. kubectl & YAML manifests 7. CIS Benchmark (v1.23) 8. Python3 ๐Ÿ“Œ Watch This If: 1. You're a beginner or intermediate DevSecOps engineer 2. You want hands-on practice with Kubernetes security tools 3. You're preparing for CKS (Certified Kubernetes Security Specialist) 4. You want to build security into your CI/CD pipeline ๐Ÿ“บ Timestamps 00:00 - Intro & Objectives 00:39 - Setup Environment 02:45 - Minikube Cluster Setup 04:00 - Running kube-hunter (remote scan) 08:40 - Simulate Vulnerabilities in k8s Cluster 17:28 - Vulnerability Verification 21:43 - Retrieve Vulnerability Scan Results with kube-hunter pod 26:25 - Remediation Tips 32:01 - CIS Benchmarking with kube-bench 35:40 - Retrieve & Analyze kube-bench logs with jq ๐Ÿ”” Subscribe for More! ๐ŸŽฏ If you found this project helpful, donโ€™t forget to like, comment, and subscribe to the channel for more DevSecOps, DevOps, Kubernetes, and AI-powered project tutorials every week! #Kubernetes #DevSecOps #kubehunter #kubebench #Minikube #PenetrationTesting #CISBenchmark #KubernetesSecurity #i
Watch on YouTube โ†— (saves to browser)
Sign in to unlock AI tutor explanation ยท โšก30

Related Reads

Chapters (10)

Intro & Objectives
0:39 Setup Environment
2:45 Minikube Cluster Setup
4:00 Running kube-hunter (remote scan)
8:40 Simulate Vulnerabilities in k8s Cluster
17:28 Vulnerability Verification
21:43 Retrieve Vulnerability Scan Results with kube-hunter pod
26:25 Remediation Tips
32:01 CIS Benchmarking with kube-bench
35:40 Retrieve & Analyze kube-bench logs with jq
Up next
AWS, Azure, GCP: The One Thing Every Business Gets Wrong
AI Daily
Watch โ†’