Add README

README.md

@@ -0,0 +1,51 @@
+# Kubeletmein
+
+This is a simple penetration testing tool which takes advantage of public cloud provider approaches to providing kubelet credentials to nodes in a Kubernetes cluster in order to gain privileged access to the k8s API. This access can then potentially be used to further compromise the applications running in the cluster or, in many cases, access secrets that facilitate complete control of Kubernetes.
+
+## How it works
+
+`kubeletmein` is a simple Go binary that is designed to be run from a pod inside your target cluster. Typically this will be either via exploiting a weakness in a web application running on Kubernetes or, perhaps an internal penetration test where the client has given you exec access into a pod.
+
+It reads kubelet credentials from the cloud provider metadata and configures a kubeconfig file that you can use with `kubectl` to access the API.
+
+## Support providers
+
+### GKE
+
+Currently only GKE is supported and it relies on the metadata concealmeant being disabled (the default setting).
+
+### EKS
+
+I'm working on support for EKS. It's actually a lot easier to exploit this on EKS than GKE.
+
+### AKS
+
+I should probably look at Azure at some point but....Microsoft. ;-)
+
+
+## Installation
+
+It's a single binary compiled for Linux. Download it with `cURL` or `wget` from the releases page at [https://github.com/4armed/kubeletmein/releases](https://github.com/4armed/kubeletmein/releases).
+
+## How to
+
+### GKE
+
+On GKE kubeletmein is a two stage process. First we write out a bootstrap-kubeconfig using the certificates and key from the `kube-env` instance attribute. Then we generate a certificate sigining request and use the bootstrap config to submit it to the API for approval.
+
+Then we download the certificate and configure `kubeconfig`.
+
+### EKS
+
+Coming soon.....
+
+
+## Contributing
+
+Please submit pull requests on a separate branch. We welcome all improvements. It's not the world's best bit of code.
+
+Please raise issues on GitHub if you find any, including feature requests.
+
+## Disclaimer
+
+This is intended for professional security testing or research. We subscribe to the DBAD philosophy.