Offensive Operations in Kubernetes and GKE
- Hands-on, lab-driven bootcamp focused on offensive security in Docker, Kubernetes, and GKE
- Learn to exploit misconfigurations, exposed services, and weak identities for initial access
- Perform privilege escalation, persistence, defense evasion, and data exfiltration in real scenarios
- Execute lateral movement across Kubernetes clusters and cloud environments
- Explore Kubernetes + GCP IAM attack paths to escalate privileges and pivot within cloud infrastructure
- Unlimited Challenge Attempts
- Gamified flag based challenges
- Perform offensive operations across API infrastructure
- Earn & Show-off your CWL Verified API-RTA Certificate
- Join CWL Red Team Community (Discord Channel)
The course content is divided across 7 sections listed below:
Module 1: Attacking Docker Environments
- Docker Attack Surface Reconnaissance
- Discovery of Exposed Docker APIs and Sockets
- Container Registry Enumeration and Image Discovery
- Docker Exploitation Techniques
- Abuse of Docker Daemon for Code Execution
- Container Escape and Host Breakout Techniques
- Real-World Attack Scenarios and Case Studies
- Exploitation of Misconfigured Docker APIs in Production
- Container Supply Chain and Malicious Image Attacks
Module 2: Attacking Kubernetes Clusters
- Kubernetes Threat Modeling & Attack Surface Mapping
- External Attack Surface Exploitation
- Unauthenticated Attack Vectors
- Cluster Fingerprinting and Environment Profiling
- Identification & Exploitation of Misconfigured Components
- Initial Access via Credential Abuse
- Abuse of Leaked Credentials
- Cloud Credential and Identity Abuse
- Post-Access Enumeration
- RBAC and Permission Mapping
- Cluster Resource Discovery
- Initial Access from Compromised Workloads
- Exploitation of Vulnerable Application Containers
- Authenticated Attack Vectors
- Authenticated Attack Vectors
Reconnaissance & Discovery
- Endpoint discovery via crawling, fuzzing, JS/JSON/YAML analysis.
- Understanding and exploiting API documentation: OpenAPI/Swagger, Postman Collections, GraphQL introspection.
API Pentesting Tools
- Burp Suite basics.
- Postman workflows & proxying.
- FFUF fuzzing, Nuclei scanning & tuning, Katana crawling.
- Hands-on tool demonstrations.
Authentication & Authorization Attacks
- AuthN vs AuthZ basics.
- JWT internals, OAuth 2.0 flows, OIDC variants.
- Practical attacks on OAuth/OIDC, Broken Access Control, BOLA, Mass Assignment, and other auth flaws.
API Data Flow Manipulation & Execution Attacks
- SQLi, NoSQLi, GraphQL Injection, Command Injection.
- SSRF, insecure file handling (upload/path traversal), parameter tampering, race conditions.
- Comprehensive exploitation demos.
Advanced API Manipulation & Exploitation Vectors
- LLM prompt injection attacks.
- Cloud-native API exploitation.
- Sensitive data exposure through debug endpoints, OAuth userinfo leaks, malformed responses, and cloud logs.
Pre-requisites
Following are the requirements:
- System with 16 GB+ RAM & 256 GB SSD/HDD.
- Ability to run a hypervisor on the system (Hyper-V, QEMU, VirtualBox, or VMware).
- Comfortable with basic networking and HTTP concepts (requests, responses, headers, status codes, ports).
- Familiarity with HTML, JavaScript, and web application architecture (client/server, cookies, sessions).
- Basic Linux command‑line skills (shell, editing files, process management) and file-system navigation.
- Some programming experience (Python, JavaScript, or similar) sufficient to read and write small scripts.
Target Audience
Targeted Audience may include the following group of people:
- Web developers and software engineers who want to understand how attackers exploit API flaws.
- Security engineers, pentesters, and red‑teamers seeking hands‑on skill development and tooling proficiency.
- DevOps and SRE professionals responsible for deploying and hardening APIs.
- QA engineers interested in integrating security testing into API infrastructure.
- Technical team leads and architects who must prioritize remediation and design secure systems.
Premium Version
API Red Team Analyst (API-RTA)
$49
Top features:
- 3.5+ hours of HD video content.
- 170+ pages of PDF study material.
- Unlimited Exam Attempts
- CWL Verified API-RTA Certificate
