Kubernetes Goat
Attack and defend a deliberately vulnerable Kubernetes cluster
Kubernetes Goat installs a set of deliberately insecure apps into a Kubernetes cluster that you control. After a setup script and a port-forward, you open a local page that links to 22 scenarios. In each one you find and exploit a real weakness, such as secrets left in a Git folder, a Docker-in-Docker escape, a container escape to the host, a weak RBAC setup or an open private registry, and many goals end with a flag.
Free · No login · Terminal · Intermediate
About Kubernetes Goat
Every scenario page has a story, a goal, hints and a full walkthrough. Some scenarios cover defence too, with tools like Falco and CIS benchmark checks. It suits people learning container and Kubernetes security who already know basic kubectl.
It is free and open source under the MIT license. You need admin access to a cluster plus kubectl and helm, and the guide covers local and cloud clusters.
Made this game? Claim it →
Tips and discussion
No tips yet.
Sign in to share a tip.