kubernetes-goat - Kubernetes Goat is a "Vulnerable by Design" cluste

项目说明

<p align="center">
<a href="
<img alt="Kubernetes Goat" src="kubernetes-goat-logo.png" width="150" />
</a>
</p>
<h1 align="center">
Kubernetes Goat
</h1>
<p align="center">
✨ The Kubernetes Goat is designed to be an intentionally cluster en to learn and practice Kubernetes security 🚀
</p>

<p align="center">
🙌 Refer to <b><a href=" for the guide 📖
</p>

<p align="center">
<a href="
<img alt="Netlify Status" src=" />
</a>
<a href="
<img alt="License: MIT" src=" />
</a>
<a href="
<img alt="GitHub release" src=" />
</a>
<a href="
<img alt="Github Stars" src=" />
</a>
<a href="
<img alt="PRs Welcome" src=" />
</a>
<a href="
<img alt="Docker Pulls Kubernetes Goat" src=" />
</a>
<a href="
<img alt="Twitter" src=" />
</a>
<a href="
<img alt="Discord" src=" />
</a>
</p>

![Kubernetes Goat Home]()

🧰 Setting up Kubernetes Goat

* Ensure you ha access to the Kubernetes cluster and installed kubectl. Refer to the docs for installation

* Ensure you have the helm package manager installed. Refer to the docs for installation
* To set up the Kubernetes Goat resources in your cluster, run the following commands:

* Ensure the pods are running before running the access script

!all pods running in kubectl get pods

* Access Kubernetes Goat by exposing the resources to the local system (port-forward) by the following command:

* Then na to

> Refer to for setting up Kubernetes Goat in en like GKE, EKS, AKS, K3S, KIND, etc.

🏆 Scenarios

1. Sensitive keys in codebases
2. DIND (docker-in-docker) exploitation
3. SSRF in the Kubernetes (K8S) world
4. Container escape to the host system
5. Docker CIS benchmarks analysis
6. Kubernetes CIS benchmarks analysis
7. Attacking private registry
8. NodePort exposed services
9. Helm v2 tiller to PwN the cluster - [Deprecated]
10. Analyzing crypto miner container
11. Kubernetes namespaces bypass
12. Gaining en information
13. DoS the Memory/CPU resources
14. Hacker container preview
15. Hidden in layers
16. RBAC least pri misconfiguration
17. KubeAudit - Audit Kubernetes clusters
18. Falco - Runtime security monitoring & detection
19. Popeye - A Kubernetes cluster sanitizer
20. Secure network boundaries using NSP
21. Cilium Tetragon - eBPF-based Security Obser and Runtime Enforcement
22. Securing Kubernetes Clusters using Kyverno Policy 引擎

📖 Documentation Guide

Here is the detailed step by step guide for learning and using Kubernetes Goat 🎉: documentation guide

![Kubernetes Goat Documentation Guide]()

Reference:

⚠️ Disclaimer

> Kubernetes Goat has intentionally created , applications, and configurations to attack and gain access to your cluster and workloads. Please DO NOT run this alongside your production en and infrastructure. We highly recommend running this in a safe and isolated (contained) en.

> Kubernetes Goat is used for educational purposes only. Do not test or apply these attacks on any systems without permission. Kubernetes Goat comes with absolutely no warranties, by using it you take full responsibility for all outcomes.

📝 License

MIT

✨ Acknowledgements

Thanks to to these wonderful people: 🎉

<table>
<tr>
<td align="center"><a href=" alt="madhuakula"src=" width="100" /><br />madhuakula</a></td>
<td align="center"><a href=" alt="phpsystems"src=" width="100" /><br />phpsystems</a></td>
<td align="center"><a href=" alt="adamhurm"src=" width="100" /><br />adamhurm</a></td>
<td align="center"><a href=" alt="malwareowl"src=" width="100" /><br />malwareowl</a></td>
<td align="center"><a href=" alt="za"src=" width="100" /><br />za</a></td>
<td align="center"><a href=" alt="0xCardinal"src=" width="100" /><br />0xCardinal</a></td>
</tr>
<tr>
<td align="center"><a href=" alt="dependabot[bot]"src=" width="100" /><br />dependabot[bot]</a></td>
<td align="center"><a href=" alt="da"src=" width="100" /><br />da</a></td>
<td align="center"><a href=" alt="mkcn"src=" width="100" /><br />mkcn</a></td>
<td align="center"><a href=" alt="rewanthtammana"src=" width="100" /><br />rewanthtammana</a></td>
<td align="center"><a href=" alt="samriggs"src=" width="100" /><br />samriggs</a></td>
<td align="center"><a href=" alt="nayanballa08"src=" width="100" /><br />nayanballa08</a></td>
</tr>
<tr>
<td align="center"><a href=" alt="gvoden"src=" width="100" /><br />gvoden</a></td>
<td align="center"><a href=" alt="a"src=" width="100" /><br />a</a></td>
<td align="center"><a href=" alt="macagr"src=" width="100" /><br />macagr</a></td>
<td align="center"><a href=" alt="commjoen"src=" width="100" /><br />commjoen</a></td>
<td align="center"><a href=" alt="ra"src=" width="100" /><br />ra</a></td>
<td align="center"><a href=" alt="BlaiseOfGlory"src=" width="100" /><br />BlaiseOfGlory</a></td>
</tr>
<tr>
<td align="center"><a href=" alt="llaltxll"src=" width="100" /><br />llaltxll</a></td>
<td align="center"><a href=" alt="hexachordanu"src=" width="100" /><br />hexachordanu</a></td>
<td align="center"><a href=" alt="bzd111"src=" width="100" /><br />bzd111</a></td>
<td align="center"><a href=" alt="William-LP"src=" width="100" /><br />William-LP</a></td>
<td align="center"><a href=" alt="wurstbrot"src=" width="100" /><br />wurstbrot</a></td>
<td align="center"><a href=" alt="suneshgovind"src=" width="100" /><br />suneshgovind</a></td>
</tr>
<tr>
<td align="center"><a href=" alt="SumoSumir"src=" width="100" /><br />SumoSumir</a></td>
<td align="center"><a href=" alt="smoyer64"src=" width="100" /><br />smoyer64</a></td>
<td align="center"><a href=" alt="pichuang"src=" width="100" /><br />pichuang</a></td>
<td align="center"><a href=" alt="nmiekley"src=" width="100" /><br />nmiekley</a></td>
<td align="center"><a href=" alt="NF997"src=" width="100" /><br />NF997</a></td>
<td align="center"><a href=" alt="Like0x"src=" width="100" /><br />Like0x</a></td>
</tr>
<tr>
<td align="center"><a href=" alt="Alle"src=" width="100" /><br />Alle</a></td>
<td align="center"><a href=" alt="aaaart3m"src=" width="100" /><br />aaaart3m</a></td>
<td align="center"><a href=" alt="AmeerAssadi"src=" width="100" /><br />AmeerAssadi</a></td>
<td align="center"><a href=" alt="apvarun"src=" width="100" /><br />apvarun</a></td>
<td align="center"><a href=" alt="ant4g0nist"src=" width="100" /><br />ant4g0nist</a></td>
</tr>
</table>

项目信息

开发语言：HTML

Star 数：5895

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。