hunt-k8s

SkillCloud & infra

Hunt Kubernetes & Docker, API anonymous access, kubelet 10250 exec (SPDY/WebSocket, NOT plain POST) and the simpler /run primitive, etcd 2379 unauth, dashboard skip-login, RBAC misconfig, secret/SA-token abuse, docker.sock host escape, runc/container-escape (Leaky Vessels CVE-2024-21626), API-serve

Available today. Use it from your connected AI after setup.

No other account needed.

Then ask your AI: use the hunt-k8s skill