Kubernetes-DNS-spoofing-POC
A proof-of-concept Python script showing a DNS spoofing attack in Kubernetes from a pod on a worker node. It is a security research demo of that attack path.
Share on XLicense: GPL-2.0
Overview
This is a proof-of-concept Python script that carries out a DNS spoofing attack in a Kubernetes environment, from a pod running on a worker server. It comes from CyberArk Labs research, and the README points to a CyberArk threat research blog post for background on the attack vector. It is a security research demonstration, not a general tool.
Key features
- Python script demonstrating DNS spoofing in Kubernetes
- Attack is run from a pod on a worker server
- Linked CyberArk blog post explains the background
Best for
Security researchers and cluster defenders who want to understand this attack path. Use it only in environments you are authorized to test.
- Upstream
- C-h4ck-0/Kubernetes-DNS-spoofing-POC
- Fork on GitHub
- Guo-astro/Kubernetes-DNS-spoofing-POC
- Upstream stars
- 15
- Category
- Security and networking
- Language
- Python
- License
- GPL-2.0
- Forked
- 2021-03-16
- Sync status
- In syncLast synced 2026-10-06
More in Security and networking
A local tool for checking whether personal information appears in publicly exposed internet sources. It helps people review privacy exposure and keep the process local.
Forked 2026-10-03Last synced 2026-10-06License: MITSecurity and networkingGitHub
GhostTrack is a Python OSINT tool for checking IP addresses, phone numbers, and social media usernames. It runs on Linux or Termux for information gathering and authorized testing.
Forked 2026-09-29Last synced 2026-10-06No license declaredSecurity and networkingGitHub
A terminal dashboard and CLI for managing WireGuard and OpenVPN tunnels and checking network status and potential leaks. Use it to control multiple VPN profiles without a desktop client.
Forked 2026-09-29Last synced 2026-10-06License: MITSecurity and networkingGitHub
A web toolbox for IP lookup and network diagnostics. It shows IP location, ASN, reputation and risk, and checks DNS, CDN, browser fingerprint, WebRTC and AI service status.
Forked 2026-09-28Last synced 2026-10-06License: AGPL-3.0Security and networkingGitHub